99540b3a8de98994d1ad10ef01f475f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99540b3a8de98994d1ad10ef01f475f6
Size

395KB
MD5

99540b3a8de98994d1ad10ef01f475f6
SHA1

163c5f539b43185170c8ba116cfa96ea1fa1f514
SHA256

3f529a0933a7b4cc82b65ab9b4b646399a9c9672a197e438dbbd7bf53ecf936a
SHA512

257d1fd947985602bc457c61ea0ee3e115cc0edae2125aff2142f79e65fc4aa89c727082247a53c4a41911ad92f181095f1b66579accd34de6bbe34e9901acf7
SSDEEP

12288:9ozn6NAHKUBfX0NjGoSdOC8g4G2G74zO+OeV3LnsEMiagno:Cm1UZX0hS98gp4aInsEMQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99540b3a8de98994d1ad10ef01f475f6

Files

99540b3a8de98994d1ad10ef01f475f6
.exe windows:4 windows x86 arch:x86

524e45db88dc6439f37b4388f1d8938c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetModuleHandleA
GetProcAddress
VirtualAlloc
TlsFree
GetCurrentThread
Sleep
DeleteTimerQueue
CreateSemaphoreA
GetModuleFileNameA

user32

IsWindowUnicode
PostMessageA

ole32

CoInitialize
CoUninitialize

netapi32

NetDfsManagerInitialize

psapi

GetModuleBaseNameA

avifil32

AVISaveOptionsFree
AVIPutFileOnClipboard

msvfw32

DrawDibEnd

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rss
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 387KB - Virtual size: 778KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvda
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE