98d08003873ea7703094724d00a0b0a9

Sharing

Copy URL

Twitter E-mail

General

Target

98d08003873ea7703094724d00a0b0a9
Size

141KB
MD5

98d08003873ea7703094724d00a0b0a9
SHA1

dd0a30f2f71b11abe0b438576d86f663466e2ee2
SHA256

75f843dc759610863eb51321d27172de58d4456de346d4d75ec065d430073b36
SHA512

96aac2ab319e5ef69864bf1ae574b5a09c82bf4e1067f29ee20193e2adf2ff2436dd9c1782e581325e25e251202ed23e53fa4268abd59e212298005a337dec1d
SSDEEP

3072:6oXoKyhTyX559tAcLQHRN5x8XhcEcPfFwZ+9M:VMT455XAVH7YcEcPfFw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98d08003873ea7703094724d00a0b0a9

Files

98d08003873ea7703094724d00a0b0a9
.exe windows:4 windows x86 arch:x86

9a786a266cf78e70cbf2f5350eb3af30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

swprintf
clock
_acmdln
wcsncmp
sprintf
tolower
mbstowcs
memset
exit
rand
calloc
srand

kernel32

SetLastError
SetHandleCount
GetCurrentProcess
FindFirstFileA
VirtualAlloc
MulDiv
WriteFile
FreeLibrary
lstrcmpA
VirtualAllocEx
LocalAlloc
lstrcmpiA
lstrcpyA
GetDiskFreeSpaceA
ExitProcess
SetFilePointer
GetTickCount
GetStartupInfoA
lstrlenA
LoadLibraryA
GetSystemDefaultLangID
GetVersionExA
WideCharToMultiByte

user32

ShowScrollBar
CheckMenuItem
GetSysColor
SetPropA
GetClassNameA
DrawTextA
PostMessageA
ScrollWindow
SetScrollPos
wsprintfA
GetKeyboardType
GetKeyboardLayoutNameA
GetScrollRange
SetScrollInfo
PeekMessageW
MessageBoxA
PostQuitMessage
IsMenu
DeleteMenu
MapVirtualKeyA
EnumChildWindows
CallWindowProcA
GetCursor
SetClipboardData
MsgWaitForMultipleObjects
IsCharUpperA
GetWindowTextLengthA
IsIconic
DrawEdge
IsCharLowerA
RegisterClipboardFormatA
GetMessagePos
GetMenuItemCount
SetActiveWindow
BeginPaint
DefWindowProcA
GetDesktopWindow
GetWindowLongW
DispatchMessageA
EmptyClipboard
GetFocus
ShowWindow
DestroyIcon
GetWindowPlacement
GetKeyboardLayout
GetMenuItemInfoA
GetClassInfoA
SetTimer
RegisterClassA
SetForegroundWindow
PtInRect
LoadBitmapA
GetMenu
LoadIconA
MessageBeep
SetWindowLongW
DrawIcon
GetTopWindow
GetForegroundWindow
UpdateWindow
IsDlgButtonChecked

advapi32

RegDeleteValueA
RegQueryInfoKeyA
RegQueryValueA

Exports

Exports

RknHX@20

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.badata
Size: 1024B - Virtual size: 873B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9a786a266cf78e70cbf2f5350eb3af30

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 9KB - Virtual size: 141KB

.data Size: 110KB - Virtual size: 110KB

.edata Size: 1KB - Virtual size: 1KB

.badata Size: 1024B - Virtual size: 873B

.rsrc Size: 8KB - Virtual size: 8KB

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 9KB - Virtual size: 141KB

.data
Size: 110KB - Virtual size: 110KB

.edata
Size: 1KB - Virtual size: 1KB

.badata
Size: 1024B - Virtual size: 873B

.rsrc
Size: 8KB - Virtual size: 8KB