99dbf4e4337d4c00960834d5a60f094a | Triage

Sharing

General

Target

99dbf4e4337d4c00960834d5a60f094a
Size

63KB
MD5

99dbf4e4337d4c00960834d5a60f094a
SHA1

c6f1538c4f20128663c23c250cbeaa1d2b7199df
SHA256

ae58e1b3c08490770bd682b6d919697d9894d40665b5333560749634323f9622
SHA512

c43a5255400a287111fcc4931b76dadabe839a986b0b22cd2d2bb67aeedb0b34936bec9ae6ea7c45c33801e00c0c4f221b645b8649f2c0c5a8d037d00c704e9d
SSDEEP

1536:2aZaTN62hXxBWoauoju5RequmlEmn4Udgi2aYrA1:68Go6GKGU9E2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99dbf4e4337d4c00960834d5a60f094a

Files

99dbf4e4337d4c00960834d5a60f094a
.exe windows:4 windows x86 arch:x86

439f78f6cf3f9a73c4d5303df24cc1e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExW
CreateDirectoryExW
FindResourceW
DebugSetProcessKillOnExit
DeleteFiber
GetBinaryTypeA
SetDllDirectoryA
CreateProcessInternalW
WriteConsoleW
GetPrivateProfileStructA
GetPrivateProfileSectionNamesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE