99eaf890da4f5eaabfac3f059744b2b051c28cc06b65271e3fac71f8931e38e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99eaf890da4f5eaabfac3f059744b2b051c28cc06b65271e3fac71f8931e38e9
Size

63KB
MD5

3fe9f323459bf555eb600ddd9c0abfcd
SHA1

1c0380e4b0931466ec71e5d1a6a5c64873107231
SHA256

99eaf890da4f5eaabfac3f059744b2b051c28cc06b65271e3fac71f8931e38e9
SHA512

c07444529cddeec212276d4d34b88dc3bad57f2ca28f0603b7cd81d489113c8023e08a275b5aa67035822d1a2444b0d45b4753296984b56f1e9e3f90af5d100f
SSDEEP

768:wjzUpUWO6wZ5sk+Cl2cHE6wsd1qK5B7evtMXJISlcAmFf5j8AaFVkpTHCkWFP2ZZ:wvJvlB7+aPlcAb+Cd12NVnewT9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99eaf890da4f5eaabfac3f059744b2b051c28cc06b65271e3fac71f8931e38e9

Files

99eaf890da4f5eaabfac3f059744b2b051c28cc06b65271e3fac71f8931e38e9
.exe windows:4 windows x86 arch:x86

c32bcadb88bfa857e126073a73a39b8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
LocalReAlloc
GetPrivateProfileIntA
AddSecureMemoryCacheCallback
SetFileValidData
IsNLSDefinedString
BaseUpdateVDMEntry
GetCurrentApplicationUserModelId
ReplacePartitionUnit
ChangeTimerQueueTimer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE