a99b9d3916ae27568fa0d87d0682e1a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a99b9d3916ae27568fa0d87d0682e1a7
Size

57KB
MD5

a99b9d3916ae27568fa0d87d0682e1a7
SHA1

420864d8682e2fec8254f066b01c9de7101feaf9
SHA256

885ed9ef4f4915458b460ec1f21355b3b9bdff086b772c332dc31834bf76f6c7
SHA512

386d4d24371ef9eb68e67770209255074941543f96824f73a5f26918010f2d36b714bebac06d4e677fb14db4dcdbbfb48f46af9cb3d36c190e3d15986ccb80c6
SSDEEP

1536:vhuSn3GH5p3Q/rxxzO/cZbYOS1K7GqcFQ/:JX3GH5pQ/FNZZbYOmK7zcm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a99b9d3916ae27568fa0d87d0682e1a7

Files

a99b9d3916ae27568fa0d87d0682e1a7
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE