99624c1c8b858f72a1ee4c2fecae1da2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99624c1c8b858f72a1ee4c2fecae1da2
Size

40KB
MD5

99624c1c8b858f72a1ee4c2fecae1da2
SHA1

11004dd11452f163dd8fa2e6692d427d88ef9f1a
SHA256

786bb28012db170ddd3b26e2a471d1a7e8e2dc30f0d5e4128958af1053c10ba1
SHA512

773ce7d6f542b58f8ffe04f54e70e1a756c4df493bdaea41ae55a18daf3c7f246282797675206e507e321b12c253aafb6060c5c80b841b6edeb4cbb7e8484cf2
SSDEEP

768:WT8wdcvmFaLB4nZKpqCxjUGW/aHrFlJK9x43:y8wd6X+dVkrFlJKn43

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99624c1c8b858f72a1ee4c2fecae1da2

Files

99624c1c8b858f72a1ee4c2fecae1da2
.exe windows:4 windows x86 arch:x86

c008e1f84fece599f4a34ff2dc098b37

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
MoveFileExA
SetFileTime
GetSystemDefaultLCID
VirtualFree
WriteFile
lstrcatA
GetProcAddress
GetModuleFileNameA
GetFileTime
ExitProcess
CreateFileA
VirtualAlloc
CloseHandle

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHGetFolderPathA

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 654B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE