99bf77d1456cb68335fd6b72f2f1538a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99bf77d1456cb68335fd6b72f2f1538a
Size

70KB
MD5

99bf77d1456cb68335fd6b72f2f1538a
SHA1

b4eb15a2dfcc3c23ce59fc50158f565f03b2ef69
SHA256

1bd58b3cc177f8a26a689082e8898c61a1de4f326c13732b34820e060aee6fa8
SHA512

54a30cff6154af7c816d3e4d68ae524ce6a27cea2d8531edf46065cad396d17fb3fc8adb4827552315c157f1caa1b531b19c87c56a22d666814632de1075d231
SSDEEP

768:1iCHI1nffAkGisSQ6KRcJZOYoBudWaDyqzlL49FLdS5yA+jz+CES+R5nOwekfZUW:1LHIlfH7Q6qRBwWa2qxQFZA+j6FWw+9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99bf77d1456cb68335fd6b72f2f1538a

Files

99bf77d1456cb68335fd6b72f2f1538a
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 42KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE