99da58fce633d2a79fb694433c12efcf | Triage

Sharing

General

Target

99da58fce633d2a79fb694433c12efcf
Size

51KB
MD5

99da58fce633d2a79fb694433c12efcf
SHA1

3aba5a6677d087527bd341ec16f41870e89d4f20
SHA256

625d35e77c1e3dc5d1b17cf57dbe63b99dad002ceff45c1ae97bb1c36d84599a
SHA512

583d5391d92a71d1b20ef6924029ee7f76c4d4ac006af6a05cd862c9322b61381e405d2c2c515b95a397fbfa1a0dbc6eeda2eb86dc24a569fe8e20df72a0c4ff
SSDEEP

1536:CSIYsInH8YEIEPAjLnusp6Pr1fvIKEdTzuhOChC38usHfJY6En66y26ySCOCOdN8:VID6NEIEPAjLusp6Pr1fvIKEdTzuhOCG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99da58fce633d2a79fb694433c12efcf

Files

99da58fce633d2a79fb694433c12efcf
.exe .vbs windows:4 windows x86 arch:x86 polyglot

2504abd1985b706892167bebe457016f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CreateSemaphoreA
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
GetTickCount
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

msvcrt

_close
_lseek
_open
_read
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
getenv
malloc
memset
rand
signal
srand
strcat
strcmp
strcpy

shell32

ShellExecuteA

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE