99652a1c88257a3cb369c965736e3843 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99652a1c88257a3cb369c965736e3843
Size

12KB
MD5

99652a1c88257a3cb369c965736e3843
SHA1

62ddfe49279cf6eb41c34ed2b8ddd3a6af521b21
SHA256

787f75407e2af64a14e709e540900599fced1708059c9daa4dabf48544dd7e65
SHA512

a0217b95660e8025e9a4555b3eb5fea0593206f64aa965cef84eae5a016d770efc50fcde868015ad0624307003980bd8124d1a887ffe0e3790482b0a608d1f3e
SSDEEP

192:blEEP1oynVJkSxriXJBCAzLKBiELhZwX4zt4z6WNgNmZaKQTEBy+:bf1V1AzLZ4ZxztgZ6NAQTSD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99652a1c88257a3cb369c965736e3843

Files

99652a1c88257a3cb369c965736e3843
.exe windows:4 windows x86 arch:x86

01c032e0fa357f235839956e45a680cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??3@YAXPAX@Z
wcscpy
wcscat
??2@YAPAXI@Z
_controlfp
memcpy

kernel32

GetModuleHandleA
GetTempPathA
CreateSemaphoreA
GetTickCount
WaitForSingleObject
SleepEx
CloseHandle
lstrcpyA
GetModuleHandleW
FindResourceW
LoadLibraryW
GetProcAddress
SizeofResource
FreeResource
GetStartupInfoA

Sections

.text
Size: 1024B - Virtual size: 1020B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ