b98173a49614b8693274446ea81c53ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b98173a49614b8693274446ea81c53ef
Size

41KB
MD5

b98173a49614b8693274446ea81c53ef
SHA1

86b083cbe67aeedbe660b7edd3d638ae934bbb79
SHA256

57ebace5897d3450eab1db79399c6a1125cdde85a333ca3a8a7d46b401ef57a2
SHA512

e1c2f59b5e5809396b090a427a03e5931e84b8c21f2133814f62c2772ac34f8ba0d48ed58b54fe8aec5191e9f40bfdb0cae31d4a172e6151e47e5df18f0f06d8
SSDEEP

768:M/mJ4LAe0j1iSUwNv0fgToLapOiRTMalyu1Ky:MBATjnNuEpOiRQaK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b98173a49614b8693274446ea81c53ef

Files

b98173a49614b8693274446ea81c53ef
.exe windows:4 windows x86 arch:x86

0a70028c1c8527eb70197d339e8dc4cf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetTickCount
SetLastError
FreeLibrary
VirtualAlloc
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LoadLibraryW

atl

AtlMarshalPtrInProc

ntdll

NtAddAtom

Sections

.textbss
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE