99363f2e3501a957a8f3f3705ba861e157441d644c7b3971a6f8afce7f88a6a9 | Triage

Sharing

General

Target

99363f2e3501a957a8f3f3705ba861e157441d644c7b3971a6f8afce7f88a6a9
Size

26KB
MD5

4d12d5bbd670a754f1a99a9cb13614e1
SHA1

4c9904a2c5dfe6fe1c52afbc9e0fdca2e33e641b
SHA256

99363f2e3501a957a8f3f3705ba861e157441d644c7b3971a6f8afce7f88a6a9
SHA512

d5f92c6220528b9c9f95302bf27408f9544711d56b2620eba6e4f508889cbf26db3367b55a477632c1c1964fa084290287515a2016807e1b9d4a737f21511c60
SSDEEP

384:0l6d+tqqDRhG15xvnxWOFwIqMV468UneYeZ:0s+oohCx8aqMVcYeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99363f2e3501a957a8f3f3705ba861e157441d644c7b3971a6f8afce7f88a6a9

Files

99363f2e3501a957a8f3f3705ba861e157441d644c7b3971a6f8afce7f88a6a9
.exe windows:4 windows x86 arch:x86

8b952403cd7980f20cd10a1500bc5902

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoInitialize

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

dhcpcsvc

DhcpDeRegisterParamChange

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ