98aa613c71422b86b2f3e90cc6c8fdf6

General

Target

98aa613c71422b86b2f3e90cc6c8fdf6
Size

276KB
MD5

98aa613c71422b86b2f3e90cc6c8fdf6
SHA1

e482d8501e03020faaa9c04399ea617f84aa07a9
SHA256

2402aa6e9722855be33eb68793d77d17dd79cf71c623643a8ce40fde3a1f6a9a
SHA512

56c6607bc0502ac3e4920896754a360f794efb6d8e40a91e86b573c7e1aa4b6415c7e44b78c8ecd10c6f43c9deec9db6778469705f0d07ab0f0e2b910b2c6d77
SSDEEP

6144:jKkacf9igKV9YG9TM+1AxPR3QZlFAVnoYoAwdFAGqHYWK:jQcfsJRJAP6rFAVDGqtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98aa613c71422b86b2f3e90cc6c8fdf6

Files

98aa613c71422b86b2f3e90cc6c8fdf6
.exe windows:4 windows x86 arch:x86

f1bb6b23690f0c97491dcd4217aa2043

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
TlsAlloc
TerminateProcess
AddAtomW
SetLastError
GetVersion
GetModuleHandleW
GetFileType
SetUnhandledExceptionFilter
HeapAlloc
GlobalMemoryStatus
GetTickCount
RtlUnwind
SetHandleCount
CloseHandle
DeviceIoControl
GetCommandLineA
TlsGetValue
EnumResourceNamesA
GetCurrentProcess
GetCurrentThread
HeapFree
GetStartupInfoA
GetProcessHeap
GetVersionExA
GetCurrentProcessId
QueryPerformanceCounter
TlsSetValue
RaiseException
OutputDebugStringW
GetComputerNameA
GetStdHandle
GetSystemTimeAsFileTime
TlsFree
GetLocalTime
GetDiskFreeSpaceA
InterlockedExchange

msvcrt

__p__fmode
_exit
_amsg_exit
_ismbblead
memset
__getmainargs
__set_app_type
_XcptFilter
_initterm
?terminate@@YAXXZ
_vsnprintf
exit
__p__commode
_cexit
_acmdln
_vsnwprintf
__setusermatherr
_controlfp

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1bb6b23690f0c97491dcd4217aa2043

Headers

File Characteristics

Imports

kernel32

msvcrt

setupapi

Sections

.text Size: 137KB - Virtual size: 136KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 135KB - Virtual size: 134KB

.reloc Size: 1024B - Virtual size: 392KB

.text
Size: 137KB - Virtual size: 136KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 135KB - Virtual size: 134KB

.reloc
Size: 1024B - Virtual size: 392KB