e98c915f71788aaa2db8c0c75171ab593bf736322eef3f07bd1e329dffecd347 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e98c915f71788aaa2db8c0c75171ab593bf736322eef3f07bd1e329dffecd347
Size

14KB
MD5

5bd9aae63a26a2f4ab6e562d6ea52a7a
SHA1

fc4172e11b32a6f216e982dacb4ab9e22e28fb4e
SHA256

e98c915f71788aaa2db8c0c75171ab593bf736322eef3f07bd1e329dffecd347
SHA512

98ad946b56fe2309f7dd992b091bd2c2b89edf50cb051b1347c5cba029ccfcd8b015fe1916eb547bc0245b63fd4bf7198a87b3d53e7ad02d40d9e22f3ac77bd4
SSDEEP

192:bOcrEQ8XZGMxpJSwZCbP3TSEmZH46A3CzYWu58u51YxAghs3nnnnnn+:aoELIeMNmXA3CzYd5r51Yxzh3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e98c915f71788aaa2db8c0c75171ab593bf736322eef3f07bd1e329dffecd347

Files

e98c915f71788aaa2db8c0c75171ab593bf736322eef3f07bd1e329dffecd347
.exe windows:4 windows x86 arch:x86

0492baea297996815693da7f4b834882

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleFileNameA
DeleteFileA
CloseHandle
ReadFile
GetFileSize
CreateFileA
WriteFile
GetCommandLineA
IsBadReadPtr
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA

user32

PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA
MessageBoxA

msvcrt

rand
strrchr
malloc
realloc
_ftol
free

shlwapi

PathFileExistsA

shell32

ShellExecuteA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ