98ffa5c390df6fe97b0492ab5a325819 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98ffa5c390df6fe97b0492ab5a325819
Size

40KB
MD5

98ffa5c390df6fe97b0492ab5a325819
SHA1

470e493cbdbe79344fbdc59efc49633195dca1a6
SHA256

dbfa73527a57464c9802b7ffd45367c0bad888efde3371f3494f2a86d52b15ef
SHA512

f54b2044e4b27f527ab8028fd4765b2ca89795f276fe262b6ab8ab41902876b6ad3e325e05527b917a2ef950c98cbdaefb7a5209ee4636f7e265caed38ce4fde
SSDEEP

384:6NOu53MFt0GkbXGy90piAUZ3W8RaEz+2yJ3WX8mUxKjtwtYqXV9ZON6D605vsWAF:mOmIti90MAUHRaEzW3WXdNneV9n6CON

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98ffa5c390df6fe97b0492ab5a325819

Files

98ffa5c390df6fe97b0492ab5a325819
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

InstGetMsg
MyCallWndProc

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ