99d3fb07df9e8763089cdbb2eff70c97 | Triage

Sharing

General

Target

99d3fb07df9e8763089cdbb2eff70c97
Size

396KB
MD5

99d3fb07df9e8763089cdbb2eff70c97
SHA1

ee8cedb03ae002485bb72ffaf8ccf70230d77e66
SHA256

c1b13e2651403de595e5519386ab9baa50c3c5f2eece90a41b5b6c0b0625c6c3
SHA512

e6514d2bfb960167e7db2b44850a663e930d9971c8302afe6b367565674975cf5043b39d187ff7d9e3363b8150e70760823fd9709dc630cab95c62d1d9dfef83
SSDEEP

6144:3nMirGyGQBBVOJnptAHDKKo/VaShM4D4JzVPHd6DSNNTXWGCDu/:9rBxsptlK8D2JPHcGHXWVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99d3fb07df9e8763089cdbb2eff70c97

Files

99d3fb07df9e8763089cdbb2eff70c97
.exe windows:4 windows x86 arch:x86

d97e6891eec9d0b50fb5de803b0cb8d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetSystemTime
lstrcpyA
LoadLibraryW
lstrlenA
GetComputerNameA
Sleep
GetCommandLineW
FindClose
CreateThread
CloseHandle
GlobalUnlock
GetModuleHandleA
GetCurrentDirectoryA
GetTickCount
HeapCreate
PulseEvent
CreateFileW
UnmapViewOfFile
ResetEvent

user32

GetCaretPos
CheckRadioButton
DrawEdge
DispatchMessageA
GetDlgItem
IsWindow
CreateIcon
DrawMenuBar
SetFocus
GetDC
CallWindowProcA
FillRect
CreateWindowExA

cryptui

CryptUIDlgCertMgr
WizardFree
CryptUIDlgSelectCA
CryptUIDlgSelectStoreA
LocalEnroll

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 371KB - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ