99b0bd9cd09d7489613a267713d7a4ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99b0bd9cd09d7489613a267713d7a4ab
Size

16KB
MD5

99b0bd9cd09d7489613a267713d7a4ab
SHA1

56f88383dfd8058c923c29364341c5ceeea5a57e
SHA256

362553ab669e9259e689d287232b6c686a9978d514d03178572683ce69559625
SHA512

98a219f9a7630cecd1127534a96e1b3be088c3309040304e766f2841f4ea65fd0014f7aec00eeb0711bb7f5b52b165cfff96795f119ddb8e581bfca5fadfbf32
SSDEEP

96:ePZwvPoBr1pS37PCd5+gbnaGNe3+DrAzqFvK2Ii:IKvPo11pSgdDrAzAvn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99b0bd9cd09d7489613a267713d7a4ab

Files

99b0bd9cd09d7489613a267713d7a4ab
.exe windows:4 windows x86 arch:x86

337c12d95871c4db39e505c2ca4200ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
GetModuleFileNameA
DeleteFileA
CreateFileA
GetLocalTime
CloseHandle
LoadLibraryA
GetSystemDirectoryA
GetProcAddress
Sleep

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

wininet

HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

msvcrt

_access
atoi
exit

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE