98276fa466a9164f2c26c8265a70d730N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

98276fa466a9164f2c26c8265a70d730N.exe
Size

36KB
MD5

98276fa466a9164f2c26c8265a70d730
SHA1

4eb694b2b172b66399882a228dbc0a3cd5b420a0
SHA256

cd76ddfa92aec7c6682e9f8dd14bd20c1fefa12030e57892f437714ab8ce9e67
SHA512

be4137cf2f0faedf3109930e3b316776fc76a176a9f133e6b8e1bc1717b194fed8c46ddb2584145d31922ca3173e5b45991e3c3a76871004bdf4eee0d156d14f
SSDEEP

384:1qWlZaEEVXog9YoHO5YuG8OlAaCieY+sa3VdP1nzK5U/bpEY:1qWiEfxouGuhO/CieY54KtY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98276fa466a9164f2c26c8265a70d730N.exe

Files

98276fa466a9164f2c26c8265a70d730N.exe
.dll windows:4 windows x86 arch:x86

09b2081e6a228aeb1893c2e7b29150a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_adjust_fdiv
malloc
_initterm
free
_setjmp3
sprintf
exit
longjmp

kernel32

DisableThreadLibraryCalls
FreeLibrary
InterlockedExchange
Sleep
LocalAlloc
LocalFree
GetCommandLineA
GetModuleHandleA
GetLastError
GetProcAddress
LoadLibraryA

user32

MessageBoxA
CharUpperA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

CIPTMCTW
_mFdllinfo

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 829B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 855B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ