98b4ccc5afdda7e9e425fa8ebc80ebb0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98b4ccc5afdda7e9e425fa8ebc80ebb0
Size

167KB
MD5

98b4ccc5afdda7e9e425fa8ebc80ebb0
SHA1

02fe974e655512f1751d3655f750c8feb0001f39
SHA256

e8a9de87b492a4d2c68250b36aa27fa5f59ccdffed09228d1e8862d40c3cdbb2
SHA512

ac617f12bd0f580ff44129a2e13d33fca0df112123337a7f53f303b96a646911c66b6f4b9d84a61a714a02d056b25a4bce25e8377c9f8820974212687be60168
SSDEEP

3072:AGBIwTG4BT4UPezz0vESEDWoUCdll4TSAZfwndJFKKoLZDc1y:pBIwTG4kzovV4hjdJIL1H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98b4ccc5afdda7e9e425fa8ebc80ebb0

Files

98b4ccc5afdda7e9e425fa8ebc80ebb0
.exe windows:4 windows x86 arch:x86

60d9506b9ed0598cc54a320ffe09b6bd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

ole32

CoGetMalloc
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

kernel32

LoadLibraryExW
CloseHandle
GetCalendarInfoA
WriteFile
GetStdHandle
SystemTimeToFileTime
LoadResource
LeaveCriticalSection
lstrcpynW
FindResourceA
GetProcessHeap
EnumResourceNamesA
GetVersionExA
LockResource
SizeofResource
HeapFree
FindFirstFileW
HeapDestroy
GetSystemTime
LoadLibraryW
GetModuleHandleA
CreateFileW
HeapAlloc
FindResourceExA
TerminateProcess

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ