98fccfc490b82a9fec4bcc92162051b7 | Triage

Sharing

General

Target

98fccfc490b82a9fec4bcc92162051b7
Size

41KB
MD5

98fccfc490b82a9fec4bcc92162051b7
SHA1

0f956ae62cd4d2dc6a37751c09eed9a921f2717e
SHA256

4aea1c8135cef856ac87c4c40b4324a3cf249dbe8665e79b28f0bbc1b48957de
SHA512

cd8fb1f63f7580f6c850b5c6968a4d1b7e09e6b3e58f37e08a26604485e9f36f3073b77936139fa87ef318f077015c02d588fee7f836f6e38e33f1441c3b86d3
SSDEEP

768:8babhxrq7w1ymJ+JZN3rm3Fx1KRFA0pt17DL3jnNH9p7sxXSHE4AX18voNjcw:8ba9x4f4idm3n1j0TRbNHfqik4AF8gFc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98fccfc490b82a9fec4bcc92162051b7

Files

98fccfc490b82a9fec4bcc92162051b7
.exe windows:4 windows x86 arch:x86

b2109805714be760d19ddaba04010f4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetTickCount
GetVersionExA
IsDebuggerPresent
ReadFile
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteFile

wsock32

gethostbyname
WSAStartup
WSACleanup

user32

MessageBoxA

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE