990b36b1f2d371959fd2556492f5b5fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

990b36b1f2d371959fd2556492f5b5fb
Size

56KB
MD5

990b36b1f2d371959fd2556492f5b5fb
SHA1

b50b731de298d3aaffdb0668c7bde941fdfa7e0f
SHA256

7edeee9beb32186f6535d8f7f3e255f20446bb8d745d385bcc1430a8296ff47b
SHA512

a04beefae5c5fc049e75650bbdef4d12cd2ee3ba2d1a00e9cd34a4becc8391b9da793718bbc40212489078d463a0d71516a203b2c253812c546852754b1f007f
SSDEEP

768:AyLa1LvJJtxHuFR5hqJTFHFGP25jsGorLo09bUh8W++BOY4Sn05DlX3thjOKAbUR:Fa1faaFBsOobUyW6Y460FlntFOUIp+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
990b36b1f2d371959fd2556492f5b5fb

Files

990b36b1f2d371959fd2556492f5b5fb
.exe windows:4 windows x86 arch:x86

97b21b785e1f2e65ce726acde1c6d374

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
QueryDepthSList
lstrcmpiW
CreatePipe
IsProcessInJob
PostQueuedCompletionStatus
CreateFileA
CreateTapePartition
WriteConsoleInputVDMA
DeactivateActCtx
GlobalFix

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE