99ea4ced179b975c8afd8e97d8d0caf8 | Triage

Sharing

General

Target

99ea4ced179b975c8afd8e97d8d0caf8
Size

19KB
MD5

99ea4ced179b975c8afd8e97d8d0caf8
SHA1

1256cdcc91875798b050fe70f93701e17212db59
SHA256

e8374de226c1fa78368f368b26164beb3462a0d51d4e63779f211e5a8880c181
SHA512

121094ee1d5a8c4d24c9c7abd35fe325593f4b76804b71aac2b52a3b721aa841d24cb91bcd6d6c57f45787a0484546fd0965e5340cd5ffb18a5bb2c1b37ba6b7
SSDEEP

384:efVl/yUbuXxFuTt3yFg/WGpzkT2WgxiJhwXxzNTtXx:UVlqUqXPWtGgjRGgM/G5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99ea4ced179b975c8afd8e97d8d0caf8

Files

99ea4ced179b975c8afd8e97d8d0caf8
.dll windows:4 windows x86 arch:x86

f6403cdac1208d8467275952b5641b26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

sprintf

Exports

Exports

input

Sections

.text
Size: 14KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE