b99c91d3a6e6cb278259f4790001f368 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b99c91d3a6e6cb278259f4790001f368
Size

133KB
MD5

b99c91d3a6e6cb278259f4790001f368
SHA1

96d8bc1ed9103bf2b23195d789d3bc73268eaab7
SHA256

7ffd4069233bb3ffd472511273fc95c5e7a05bf4eb5feb453e80653d00cefbaa
SHA512

7906a3472a339c646820f1e90d63557329df55561a7ccf0552cf32fd10522b9c599ffdfc4041da67a850c2a83b177c42a4b4d6918622048c1ee424815fe11154
SSDEEP

3072:Kgp5n8OPInjyEqvttW7wtLTvpBRBMUqkNZr0ruEQtX:KgnnsGz15tLDpBHxqkNqrupX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b99c91d3a6e6cb278259f4790001f368

Files

b99c91d3a6e6cb278259f4790001f368
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE