00d99231f6a89f511cf7b644e2bbf04b94e3cb3f65fc1363b17d07a02ee6a27c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00d99231f6a89f511cf7b644e2bbf04b94e3cb3f65fc1363b17d07a02ee6a27c
Size

324KB
MD5

04a0b6eb7ad6c3d1778e5019460065d9
SHA1

b21d0a2d7ef00f932a93ff5c5473b0ecfac1d77d
SHA256

00d99231f6a89f511cf7b644e2bbf04b94e3cb3f65fc1363b17d07a02ee6a27c
SHA512

ebfa7dc0a03c05a048240dd62355e32110d8bdcef142d23c001690fbc1b89d6b293ccfbd9010e5ab6900cf542b7967398cd8280f37fc6d436177d04b0e66ff40
SSDEEP

6144:Zt58sOQf6lghcnBBLf9tQiepbGjhboOBnSusSTUvXBirw/AwFF4B:ZtisOQf6lXbpt/kbGjhV5AvXxH4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00d99231f6a89f511cf7b644e2bbf04b94e3cb3f65fc1363b17d07a02ee6a27c

Files

00d99231f6a89f511cf7b644e2bbf04b94e3cb3f65fc1363b17d07a02ee6a27c
.exe windows:5 windows x86 arch:x86

06ef33a1c45fdabdfa5b6e2e08bce5aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadCursorW

advapi32

RegQueryValueExW

shell32

ShellExecuteA

ws2_32

htonl

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 289KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE