99a4d626a963bfbae40393a3970a6cd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99a4d626a963bfbae40393a3970a6cd8
Size

166KB
MD5

99a4d626a963bfbae40393a3970a6cd8
SHA1

a758ad9579ea1b82c2b9b16f381b002bdd15c367
SHA256

8626b3ee16e2d824e7576dfde42c18fea8b2d2a59679925aada368509ead016b
SHA512

7c4656a967f23de4aa74fef103719b5c678ddbd9e26d099aeebbf7cab41e20e1df2e55098aabd9fa37b110c1552518488b08f75a1c4f3826832fe2ef98954a36
SSDEEP

3072:mCXdSR8lOnPUNF3lLHeU3XVVVEuUBJfq:mCtG7n8NF3lL+UHVVVPKfq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99a4d626a963bfbae40393a3970a6cd8

Files

99a4d626a963bfbae40393a3970a6cd8
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8plgla2u
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7f8zr5u9
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

76gwqzpv
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE