99a87b879cb9c0b84fd88d3366dfa665 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99a87b879cb9c0b84fd88d3366dfa665
Size

49KB
MD5

99a87b879cb9c0b84fd88d3366dfa665
SHA1

87fde6b61e5ee9da169b4b07b0bf399711b5e7c4
SHA256

08cedbcb632b271c664995064fa21a6bf9a48d2a085706702561caf60985598f
SHA512

b793867d832b5245bae3f710602dd6b9da4992d9f6fccf656036682aa3f4172aa7a5ed2e78bf822d71aec1201122d88f6b194a93386c7bdaf1a6a4c6a2a9fb1e
SSDEEP

768:AXMjO5O7d05qdRQfJXuFs4TcsJYleFr0J3S0Oef+g104h4gvy0FuBWn:8MhK5qd2RAJ2eFr0J3D+s0F5S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99a87b879cb9c0b84fd88d3366dfa665

Files

99a87b879cb9c0b84fd88d3366dfa665
.exe windows:5 windows x86 arch:x86

1bcb1a09ab92d0e029996c429d902150

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext

kernel32

GetModuleFileNameA

shlwapi

PathCombineW
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA

user32

DispatchMessageA
GetForegroundWindow
GetKeyboardState
GetKeyState
GetWindowTextA
OpenDesktopA
OpenWindowStationA
PeekMessageA
SendMessageA
SetProcessWindowStation
ToUnicode

Sections

.apwt
Size: 39KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uton
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xwz
Size: 6KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ