98f8030d1078150e2b5bc5ec16303ab6d312407d1159fcc8d00e4b40169b5bf4[.]sample | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98f8030d1078150e2b5bc5ec16303ab6d312407d1159fcc8d00e4b40169b5bf4.sample
Size

5KB
MD5

1809a5b19395f7129a5965cd5d522088
SHA1

decbfbe5f10f4f66be0b0bccbb4e645d4d039328
SHA256

98f8030d1078150e2b5bc5ec16303ab6d312407d1159fcc8d00e4b40169b5bf4
SHA512

5bebf68f0de5906fc3df4c1d034462b6878ed502ed3f497ff9f62d78f2ca8bd8bfe6d73c70b21fda908eaa296d1d73c9fbe23d6ebb89158e219cf2979e5138d3
SSDEEP

96:TpaigNAHKKjY2m7hY2mMY27zfFoOUScx:TpaimKYzfFoON

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98f8030d1078150e2b5bc5ec16303ab6d312407d1159fcc8d00e4b40169b5bf4.sample

Files

98f8030d1078150e2b5bc5ec16303ab6d312407d1159fcc8d00e4b40169b5bf4.sample
.exe windows:6 windows x86 arch:x86

44e9b22676bd83c57bd35d4c7a0b7409

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
HeapFree
SetPriorityClass
VirtualFree
GetCommandLineW
GetCurrentProcess
WriteFile
VirtualAlloc
GetModuleFileNameW
WaitForMultipleObjects
SetThreadPriority
CreateMutexW
CreateFileW
ReleaseMutex
GetLastError
GetCurrentThread
CloseHandle
GetSystemInfo
CreateThread
HeapAlloc
ExitProcess
GetProcessHeap
CreateProcessW
lstrcmpiW

user32

wsprintfW

shell32

CommandLineToArgvW

Sections

.text
Size: 1024B - Virtual size: 915B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ