98ba1bce57478d2bbd318f847401bec6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98ba1bce57478d2bbd318f847401bec6
Size

5KB
MD5

98ba1bce57478d2bbd318f847401bec6
SHA1

b442359c5871cee2f11258df9a72113b10fe4b19
SHA256

f447fb58a148b504fd4377d473f0f24bf38bb77b7bc4dede1206bf75af3e9ee9
SHA512

316293f4c8c721f2b637c1319a9aecb5ddfe5abc6247ec9158f9ef972a3b94600de1a84652088fac35a0a7dd4b4319735a5a33c9c773b0b7f3c08f767c10f98b
SSDEEP

48:K4O4k0GFeM9lXzTxGx+M6dN4/RH00ml1WiIZJvX2FvcM2ZIvhBE1Lzmi:jOH9Fz8YddNARH0PlM3BQkrIp6xmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98ba1bce57478d2bbd318f847401bec6

Files

98ba1bce57478d2bbd318f847401bec6
.exe windows:4 windows x86 arch:x86

df17faf2152aeb576ab143bebaccfb74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
WideCharToMultiByte
CreateEventA
CreateToolhelp32Snapshot
Process32First
CompareStringA
WaitForSingleObject
CloseHandle
GetModuleFileNameW
GetFileAttributesA
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
GetProcAddress
ExitThread

user32

ShowWindow
BeginPaint
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE