99cf9104a6fea1e6614653e47a571e1b7a419f087e884559b863a1583188c91e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99cf9104a6fea1e6614653e47a571e1b7a419f087e884559b863a1583188c91e
Size

1.8MB
MD5

f1b65c4e765715a21aedcf838d78f204
SHA1

996fa7ecfc8e229a9f4366c46d3af49de525bafe
SHA256

99cf9104a6fea1e6614653e47a571e1b7a419f087e884559b863a1583188c91e
SHA512

7f1ce951403ceb0190a69ba3773e5004a846f2ca488279f2dfb25a119daa42345f2dbd1b509f2e50cb0e93b5b21d897eb4349af5b88dee14c68be1775a61c3b3
SSDEEP

24576:tXwea/ydvxHTKDHvfWwe3E2typ8zSSHG3cYlafNiKwl52g6jz/KkaqoFXV1gUjlG:PxzKbc0CypZsYzlyjukaqoWS3c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99cf9104a6fea1e6614653e47a571e1b7a419f087e884559b863a1583188c91e

Files

99cf9104a6fea1e6614653e47a571e1b7a419f087e884559b863a1583188c91e
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@InitWndProc$qp6HWND__uiuil
@StdDlgProc$qp6HWND__uiuil
__GetExceptDLLinfo

Sections

CODE
Size: 132KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 34KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.debug
Size: 66KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ