98c95c6a30bdd6faab66b0ebc4344498 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98c95c6a30bdd6faab66b0ebc4344498
Size

122KB
MD5

98c95c6a30bdd6faab66b0ebc4344498
SHA1

9fd87d90640a0eb9dfafb2877ca224ec792e06c2
SHA256

6497fac2f7ac1a5db2482385129e9fdfb3970f829653fb2f5eb7ded8d9e32072
SHA512

07a21819af5d742ef0e51f8ff154e8d25ec346298b8127bad81d8d96b9b38d662dc7fcb9483e1a05d8750b62cc3cbb39411088f30e37188ebc838b3c280823a0
SSDEEP

3072:4pdiOZvyXczSTNWmYiBh/ieqLn8tTKsQezDuWL9ceeeeh:8dTv1oTPhDqLnMHPu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98c95c6a30bdd6faab66b0ebc4344498

Files

98c95c6a30bdd6faab66b0ebc4344498
.exe windows:5 windows x86 arch:x86

40408984f980275c882716d6ec105e8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Z:\Zelo\Franchise\Chrt.pdb

Imports

msvcrt

_isctype
abs

kernel32

InitializeCriticalSection
FindResourceW
GetConsoleOutputCP
CompareStringA

user32

GetActiveWindow
EqualRect
UnionRect
UnloadKeyboardLayout
GetNextDlgGroupItem

Exports

Exports

colorpix
?adjustRectLuma@@YGEUdrivenumberA@@PR

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.esap
Size: 512B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.case
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ