98cc61ab597aad890f88a9dc7ccc64ec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98cc61ab597aad890f88a9dc7ccc64ec
Size

357KB
MD5

98cc61ab597aad890f88a9dc7ccc64ec
SHA1

f427f6360b5ecd67ed6a358b6ce373df6c975ce2
SHA256

8e6c8094e39666f72604dec4952c6647e295ccb05934c232da70ee4cbbbd3031
SHA512

ecf0036b48aaa4eb2b0541f0d21e4e65e1208c0e3b9d04910eca89c35d9d4d21b132fafe09621c35c542a2d2999aaff42c85912cd4dfd96be1555fa46f947605
SSDEEP

6144:RZmMm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFNKTmdiV:TEMAxQ1bH8azq0SFNoV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98cc61ab597aad890f88a9dc7ccc64ec

Files

98cc61ab597aad890f88a9dc7ccc64ec
.exe windows:4 windows x86 arch:x86

fbfb5bcaca5b617a7d36fd75f3f2cada

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
IsDebuggerPresent
ResetEvent
GlobalLock
EnumResourceTypesW
IsBadReadPtr
CancelIo
CloseHandle
lstrlenA
GetConsoleTitleA
GetLastError
LoadLibraryExW
CreateMutexA
LocalFree
FreeConsole
SetLastError
GetSystemTime
VirtualProtectEx
GetModuleHandleA
Heap32First

user32

DialogBoxParamA
GetKeyState
CreateWindowExA
EndDialog
GetMessageA
CopyImage
IsIconic
CloseWindow
GetDlgItemInt
EnumWindows
GetDlgItemTextA
GetParent
GetMessageA
MessageBoxA

setupapi

IsUserAdmin
MyFree
SetupCloseLog
MyMalloc
MyRealloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ