99197cbd195199b35143d6163ee4782d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99197cbd195199b35143d6163ee4782d
Size

16KB
MD5

99197cbd195199b35143d6163ee4782d
SHA1

0a506c7f953d42ca4459dcfe8587d0f695a8e9a7
SHA256

e9e6a0b6f0142ef6242348071e65e0bc01e411416284e1fef44ca3190b597298
SHA512

d923a3e29c5294ae6d2f94bed30052c0ed756e9a3e773afae6ee53cd9e28503afecb40484141353897f2c2e8ae14355d5939338ff4ed283ec5877a33c9bb8044
SSDEEP

384:851crFexJTkn2Ncm3e3JTkD4ajHvWWvB:80Wdk2Wm6dkdHvWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99197cbd195199b35143d6163ee4782d

Files

99197cbd195199b35143d6163ee4782d
.exe windows:1 windows x86 arch:x86

92acee0f860da76c09c885f007c03238

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateFileA
ExitProcess
GetCommandLineA
GetFileAttributesA
GetFileSize
GetFileTime
GetLocalTime
GetStdHandle
GetTickCount
GlobalAlloc
GlobalFree
GlobalReAlloc
ReadFile
SetFileAttributesA
SetFilePointer
SetFileTime
Sleep
WriteFile
CloseHandle

Sections

CODE
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE