990c0c51f86c30ab6e676f1674bb9257 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

990c0c51f86c30ab6e676f1674bb9257
Size

42KB
MD5

990c0c51f86c30ab6e676f1674bb9257
SHA1

146b20c15dd1d075c5c5830078705b34ef5b619a
SHA256

58824d5beabcb6adc921da7b0180e4c01b55065c7c10bd31d8d895be002e20be
SHA512

86f9a582b2c59fd6908d40572059ed101edfac1e5aaa9b7cc48597550bf54b915c4f6d2adfde9c3f8fd30b38f0e1287a30f79d62cc0857d986c9c3f60a483ce4
SSDEEP

768:layiCkl3Jhkk8yTDtYPevE1EMXmWucOkroE15z/y1/srwE2KchPL+xZcf:piCC4HyNMevEBCWo4R/y1FThiZc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
990c0c51f86c30ab6e676f1674bb9257

Files

990c0c51f86c30ab6e676f1674bb9257
.exe windows:4 windows x86 arch:x86

6efdf60df3e294438a907f9bdf3f9442

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
IsDebuggerPresent
ReadFile
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 778B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE