998975386490d1b74501fdb3136fdf9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

998975386490d1b74501fdb3136fdf9c
Size

40KB
MD5

998975386490d1b74501fdb3136fdf9c
SHA1

1a97b05ec277e190809a684e0b03e16ecc1a559a
SHA256

2d77fcabbc40bd29e14d31141e14c043612de3c0317f7a71f5c786fc4a1ba130
SHA512

d77dbf22f7964ac2bd92ea24eca6b0fe4e97cace98c2a92336b94ccbd9acea0f21f9f3d0dfc2a282e4d93a1b2e4ac7a49c7f040ff8624099f8ef490ee743f9cb
SSDEEP

384:5qzVtv+K4UCEsKnTunTci86NhBml/oKTyEQAdgSyUTEIlfgLQA+8XL/enA+8XL/E:wfsKnT8hNhItQAdvmIlIP+cGA+cG/T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
998975386490d1b74501fdb3136fdf9c

Files

998975386490d1b74501fdb3136fdf9c
.exe windows:4 windows x86 arch:x86

4b14d15d83c20841643874255c9f99ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
lstrcpynA
LoadLibraryA
ExpandEnvironmentStringsA
GetCommandLineA
GetThreadLocale
EnumTimeFormatsA
GetModuleHandleA
QueryPerformanceCounter
GetOEMCP
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
HeapAlloc
HeapReAlloc
GetProcAddress
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ