98e0ee0fd896c7f126cc75a7db88492c | Triage

Sharing

General

Target

98e0ee0fd896c7f126cc75a7db88492c
Size

168KB
MD5

98e0ee0fd896c7f126cc75a7db88492c
SHA1

45dd092f17b0dd0803dd45fbc31569803060895e
SHA256

888ee773493fd57cb9c490cf52473bd1fbc233912886a094737693438144d2dc
SHA512

056a3d4864f69744dc074c33c003987fc2c02b48d41967605c374bce8824288a9de43ea6dd39270a3b1705f6c716fa60dde9a5ac2277ffc25148b3aa3fa9558b
SSDEEP

3072:mGmXJl3eK0bnJXAoTxo+xRq/TT2zHqr/C2Q3RnJauuEkWxVPxCpYTdNpCB7Zf/4g:fBxRq7GKr/WauukvMYT/aFoGT4OX9Dtx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98e0ee0fd896c7f126cc75a7db88492c

Files

98e0ee0fd896c7f126cc75a7db88492c
.exe windows:4 windows x86 arch:x86

df1bf873b40b54cf647a74be5903cbda

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetLastError
CreateMutexA
PulseEvent
GetEnvironmentVariableA
TerminateThread
LocalFree
lstrlen
GetModuleHandleA
FindResourceA
CreateFileA
LoadLibraryW
IsBadStringPtrW
TlsGetValue
GlobalUnlock
GetACP
FindClose
Sleep
ReleaseMutex
HeapCreate

user32

DrawEdge
GetDC
DispatchMessageA
FillRect
GetDlgItem
CheckRadioButton
SetFocus
GetIconInfo
CallWindowProcA
CopyRect
DrawMenuBar
IsWindow
DefWindowProcW

msasn1

ASN1BERDecBool
ASN1BERDecCheck
ASN1BEREncEoid
ASN1BERDecNull
ASN1BEREncBool

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ