98818c76328c09aeca0cc7b2583e9dbd

General

Target

98818c76328c09aeca0cc7b2583e9dbd
Size

279KB
MD5

98818c76328c09aeca0cc7b2583e9dbd
SHA1

e6a624a1bea1b1fc6dc51921259cf5cf4e7a47ac
SHA256

320afae66c7ebb5449f5984d1f0043e1c155487300e0d46e10e169ad56f129c9
SHA512

c2476eb6bb40bfc2293561417bb54b41cac85787de73414bf6b52ac750dafaa0019d1a08bd0359817150950efbeef4a90db988bcafbb9a0e12c7e63561a254d1
SSDEEP

6144:2RoSCIYJXQU/qaNr1gyL0bwPcJSJJ+WTO:2RiIgX//qmr1gTbsJB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98818c76328c09aeca0cc7b2583e9dbd

Files

98818c76328c09aeca0cc7b2583e9dbd
.exe windows:4 windows x86 arch:x86

ad4b7ed52d46c6255870e4dae4b321ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

iphlpapi

GetIpAddrTable

shlwapi

StrCmpNIA
StrStrA

shell32

SHGetFolderPathW

kernel32

GetProcessHeap
CreateSemaphoreA
GetLastError
LockResource
CreateFileW
LoadResource
ResetEvent
FreeLibrary
AddAtomW
WideCharToMultiByte
WaitForMultipleObjects
lstrlenA
InterlockedIncrement
SetThreadPriority
VirtualFree
CreateMutexA
LoadLibraryW
VirtualAlloc
GetCurrentProcessId
FindResourceA
GetSystemInfo
LoadLibraryA
EnterCriticalSection
GetTickCount
EnumResourceLanguagesW
GlobalAlloc
GetThreadPriority
GetModuleFileNameW
ReleaseMutex
ReleaseSemaphore
LeaveCriticalSection
HeapFree
MultiByteToWideChar
GetGeoInfoW
TerminateThread
IsBadReadPtr
Sleep
InterlockedDecrement
GetModuleFileNameA
GetSystemTime
QueryPerformanceCounter
IsBadWritePtr
GetProcAddress
GetExitCodeThread
GetCurrentThreadId
DisableThreadLibraryCalls
GetCurrentThread
ExitProcess

Sections

.text
Size: 141KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad4b7ed52d46c6255870e4dae4b321ee

Headers

File Characteristics

Imports

comctl32

newdev

setupapi

iphlpapi

shlwapi

shell32

kernel32

Sections

.text Size: 141KB - Virtual size: 276KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 135KB - Virtual size: 134KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 141KB - Virtual size: 276KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 135KB - Virtual size: 134KB

.rsrc
Size: 512B - Virtual size: 4KB