99e889b40b52a83abbe94e126c7352ee | Triage

Sharing

General

Target

99e889b40b52a83abbe94e126c7352ee
Size

264KB
MD5

99e889b40b52a83abbe94e126c7352ee
SHA1

3059b1a3188d8bb6af89bc904331d261445ec49c
SHA256

4e6cea75c0a9c8ef41a8f2cfb6df3150e4b96b4e2097a9fd9f9e8d40f5b0f374
SHA512

dc98d3cc3c64b75684e53d85ce291dec3b5d77badf522b4cad71211a44bbf3ea0c26b72e76a750bb823a1bfe6f0cfba02d0ec4b6c0c2ef5a19e578009c6392a9
SSDEEP

3072:bJVNmd9RhwzeehMbFzpptLDdI6KbZxpj4xGDpNWqRhE4xxAvqq3P8NBQHPE869yM:ba9szhhUEZL4irWQh1SX3ENBQHPE8l8X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99e889b40b52a83abbe94e126c7352ee

Files

99e889b40b52a83abbe94e126c7352ee
.exe windows:4 windows x86 arch:x86

e920e23e4cbe799d451ce4ba4338ee4a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
FindClose
FindFirstFileW
GetLocaleInfoA
GetVolumeInformationW
GetFullPathNameW
CreateFileW
SetErrorMode
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetStdHandle

msvcrt

_initterm
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
exp
__setusermatherr
_stricmp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_makepath
_wmakepath
wcscmp
wcscpy

msimg32

TransparentBlt

Sections

.text
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ