98f521dba367543cd07423e60203ea2f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98f521dba367543cd07423e60203ea2f
Size

5KB
MD5

98f521dba367543cd07423e60203ea2f
SHA1

1724b0d085a7e909b65864e87b2921cb8747bceb
SHA256

48cc4a8df2d4a053101938d7d74195da57aa5c452e53e82d49df44b757935663
SHA512

aa365e5bf73250390196c72e515c9ba4696731b06eb579405fe1bb5387ee276c2b88da1dc093645dc63203bd49c39d32b45632d77fa0d413a4067a1607a14ec8
SSDEEP

96:jDo9vqzGYddNARH0PlM3BTzeiLIos6xmi:jk4TIH0dGBHDIosMmi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98f521dba367543cd07423e60203ea2f

Files

98f521dba367543cd07423e60203ea2f
.exe windows:4 windows x86 arch:x86

9b9bae521008ce0bc9769730b08e36a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrcpyA
WideCharToMultiByte
CreateEventA
CreateToolhelp32Snapshot
Process32First
CompareStringA
WaitForSingleObject
CloseHandle
GetModuleFileNameW
SetFileAttributesA
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetModuleHandleA
SetEvent
CreateThread
GetProcAddress
ExitThread

user32

GetDesktopWindow
BeginPaint
DestroyWindow
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE