b99136460eb20f8d8e258af7d0bf8ebb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b99136460eb20f8d8e258af7d0bf8ebb
Size

68KB
MD5

b99136460eb20f8d8e258af7d0bf8ebb
SHA1

4bf2030c3228b63f1626cebc9d76938e2f9b4c5e
SHA256

d8e7ffce3f5ac52880708b9b4fc8b81312fcdab14cf51f2be68186bce0b28817
SHA512

2501f0461ed0eebccf51e83553d577128a953a69d1ceab652bfb2ee25216cb09455db6b1daf1c279d9ea2f2e1d3543e43cc3569bf35746666d209e84bbfa47e6
SSDEEP

1536:SjidaFHMiBz7UEsBXVXC/0cm6i5HXSe4jGXPRJkUIfLI7s2JS2bmCZF8otV1B8H:UidaFtUE4XempHCfjGXpaUSl6vE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b99136460eb20f8d8e258af7d0bf8ebb

Files

b99136460eb20f8d8e258af7d0bf8ebb
.exe windows:4 windows x86 arch:x86

7e24f3ab289d20196039f660cc586d77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFileTimeToFileTime
SetThreadPriority
lstrcpyA
QueueUserAPC
SetLastError
CloseConsoleHandle
HeapAlloc
ReleaseSemaphore
FillConsoleOutputCharacterA
MapViewOfFile
ResetEvent
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

atsec0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

atsec1
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

atsec2
Size: 45KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.atsec3
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ