99da8ee6ca26741031e143bc0fdf1dd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99da8ee6ca26741031e143bc0fdf1dd7
Size

64KB
MD5

99da8ee6ca26741031e143bc0fdf1dd7
SHA1

c5d182d9675787635976f5ff41095e000479843c
SHA256

8f230ba3c6c2fd7b664a7dfb09f16bb51f7122d3e5dd08e3154d18df86ad31bc
SHA512

9ab4a21234b321a699222827da77a4f066cb9f81bfcbf6350901591ecdc81a030733fab380e24bea1f00f079e745e7787b7d2a11a3ac9951ec6adca0e0a30e09
SSDEEP

1536:PzBQdpKMceTvdxxakEqv5vR+COqJzGDjqavlJtGFW643:1rCUlF643

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99da8ee6ca26741031e143bc0fdf1dd7

Files

99da8ee6ca26741031e143bc0fdf1dd7
.exe windows:4 windows x86 arch:x86

0d39a40671ecad7820bd4cd92da1a153

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__fmode
__set_app_type
_except_handler3
__p__commode
_controlfp
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strcmp
malloc
sprintf
strlen
free
memset
strcpy
strcat

urlmon

ObtainUserAgentString

kernel32

lstrlenA
GetModuleFileNameA
LoadLibraryA
FreeLibrary
ExitProcess
GetCommandLineW
DeleteFileA
Sleep
GetLastError
GetModuleHandleA
GetProcAddress
GetCurrentProcess
GetVersionExA
GetLocaleInfoA
GetStartupInfoA
OutputDebugStringA

shell32

CommandLineToArgvW

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE