99384c3d2f56014acf02235e375e8dba

General

Target

99384c3d2f56014acf02235e375e8dba
Size

176KB
MD5

99384c3d2f56014acf02235e375e8dba
SHA1

b959cbf5bca77aa465a104098a3ae35141b368df
SHA256

d00b9fc182c6a57937a6bf0b425d6df2f5e695ac4fd11bc4fdec43a92567a369
SHA512

6404dfb2b51c0e4782bd10356a7527413427f571c40987e813d8df4dcb4c9c9efbfd99a7685cdd20ce0129cef781af1ee0ea1baef941d1d26f3abe3e549342e6
SSDEEP

3072:Awga6smIAjNp9zqOQN0eMjaVOM+KimKFgIXrqYi8Xzl2j0F+5D0s5PZ:MGAZpJqH/cFgITz20F+N0s5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99384c3d2f56014acf02235e375e8dba

Files

99384c3d2f56014acf02235e375e8dba
.exe windows:4 windows x86 arch:x86

29051c5d07fe944e1f563f94e53ae318

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetThreadPriority
IsValidCodePage
RaiseException
RtlUnwind
GetVersionExA
IsValidLocale
LeaveCriticalSection
UnhandledExceptionFilter
WriteConsoleW
GetLastError
GetCPInfo
PurgeComm
LCMapStringW
GlobalAlloc
GetProcessHeap
EnterCriticalSection
HeapSize
WriteFile
GetModuleFileNameW
SetEndOfFile
CloseHandle
GetCurrentProcess
InterlockedDecrement
WideCharToMultiByte
DeleteCriticalSection
GetUserDefaultLCID
GetCommandLineA
GetFullPathNameW
HeapReAlloc
GetProcAddress
EnumResourceNamesA
IsDebuggerPresent
InterlockedIncrement
TerminateProcess
ExitProcess
GetModuleHandleA
HeapFree
MultiByteToWideChar
Sleep
HeapAlloc
LCMapStringA
InitializeCriticalSection
EnumSystemLocalesA
SetStdHandle
GetConsoleOutputCP
GetCurrentDirectoryW
ReadFile
CreateFileA
ExitProcess
SetUnhandledExceptionFilter
WriteConsoleA
GetLocaleInfoW
GetCurrentThreadId
GetFullPathNameA

rpcrt4

UuidCreate

user32

GetClassLongA
MessageBoxW

advapi32

RegCreateKeyExW
RegCloseKey
RegSetValueExW

shell32

SHCreateDirectoryExW
SHFileOperationW
SHGetFolderPathW

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29051c5d07fe944e1f563f94e53ae318

Headers

File Characteristics

Imports

kernel32

rpcrt4

user32

advapi32

shell32

Sections

.text Size: 153KB - Virtual size: 152KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 20KB - Virtual size: 19KB

.crt Size: 512B - Virtual size: 212KB

.text
Size: 153KB - Virtual size: 152KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 20KB - Virtual size: 19KB

.crt
Size: 512B - Virtual size: 212KB