98b98044e8b96dbbda3d9590aee996b3 | Triage

Sharing

General

Target

98b98044e8b96dbbda3d9590aee996b3
Size

316KB
MD5

98b98044e8b96dbbda3d9590aee996b3
SHA1

33b908c6b64effd81da4a688588c0e45b9a8cfb0
SHA256

e8763b7cd3c0d8bff658eeb5adff34b3f2df6289c0947e0f8b3e95f605e92640
SHA512

3cbe9a1584ac6183d17eb51aab0a9cb579727ccd545ecc55f39f7f76852e464300ae7e8496cbeb2167c7fe83ede76ec6b1ea835c9598f157dad0bfca93fdcc6f
SSDEEP

6144:roU8BmLHC9+7SxhjmqsfGCIUZXiwRlDzgnJOGHhZ9al5YgvysriJOh:roU6h5mf3I2iwDzgn3Y5h6sriJ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98b98044e8b96dbbda3d9590aee996b3

Files

98b98044e8b96dbbda3d9590aee996b3
.exe windows:4 windows x86 arch:x86

dbab47cdb17d7956736949791f6810ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
InterlockedExchange
FindFirstFileA
SetEvent
GetSystemDirectoryA
ResetEvent
GetLastError
RaiseException
Sleep
VirtualProtect
GetLocaleInfoA
HeapCreate
ReleaseMutex
CloseHandle
GlobalFree
SetErrorMode
GetCommandLineA
GetLogicalDrives
GetACP
LoadLibraryExA
EnterCriticalSection

user32

GetCursorPos
IsIconic
BeginPaint
ValidateRect
GetActiveWindow
GetFocus
FlashWindowEx
GetClassNameA
FrameRect
wsprintfA
GetWindowTextA
ReleaseDC
DrawTextA
GetWindow
SetForegroundWindow
GetParent
ShowWindow
EndPaint
FillRect

httpapi

HttpCreateHttpHandle
HttpTerminate
HttpAddFragmentToCache
HttpInitialize
HttpAddUrl

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ