97d9d8c116d146ab332ac6234f8860309130149c22fbd9da74cef9cc1a33a37b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

97d9d8c116d146ab332ac6234f8860309130149c22fbd9da74cef9cc1a33a37b
Size

320KB
MD5

9c8160c4a9eb92e1cfbdbb321f4f0b4f
SHA1

31d9aaec745f944ae3b2606e08e5d686931a1e3c
SHA256

97d9d8c116d146ab332ac6234f8860309130149c22fbd9da74cef9cc1a33a37b
SHA512

f288c26c8d90b8cfb7c4977275af8e1ee7bdd07a28127108b934247937cd7520125ece948cb8c9c626e80153df035a0b864de4cfcd1e5d88b999c4251af25095
SSDEEP

6144:pV/l5HHnLfkH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:pf522EB0NxDIBuOFe7/uT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97d9d8c116d146ab332ac6234f8860309130149c22fbd9da74cef9cc1a33a37b

Files

97d9d8c116d146ab332ac6234f8860309130149c22fbd9da74cef9cc1a33a37b
.exe windows:4 windows x86 arch:x86

ad2e51b26bc4aeadb43a13a2ba0f6d98

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommConfig
ReleaseSemaphore
IsDebuggerPresent
Process32Next
FindActCtxSectionGuid
WriteConsoleOutputCharacterA
ChangeTimerQueueTimer
GlobalMemoryStatus
GetPrivateProfileStructW
CreateIoCompletionPort

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE