99e4202cb54334d227531d7b78e64c24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99e4202cb54334d227531d7b78e64c24
Size

20KB
MD5

99e4202cb54334d227531d7b78e64c24
SHA1

90308718b25c0dc87760641fd2e7b2e89a675b99
SHA256

6b9f9c4d7495338d9f338af31e630e6024ef087540e8399de404e7466e8a1cd2
SHA512

32fc904eb350dd7567ca924a3b19b18bd2e064065e8be7797f5b41d277e597f56112973eb4a9ab8c97c53b20727977a334d8711db86792868b6ccbeaec9c9ced
SSDEEP

384:/f/xRpFHHbts4ug4c8vlSiFzFDbQgGbFCzQz8INveu99jzfVXK:/DpJbtZugCvdz1bRydz8INrLjzfVXK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99e4202cb54334d227531d7b78e64c24

Files

99e4202cb54334d227531d7b78e64c24
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 19KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE