084089b06649c63436a4c5ae64ee75ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

084089b06649c63436a4c5ae64ee75ab
Size

91KB
MD5

084089b06649c63436a4c5ae64ee75ab
SHA1

64687c310847953150fd2e547f2c4e2621e40fb2
SHA256

13ae9456e8354238bf82bc5db01ffe36163218e96428b94085f5a54cfc17945d
SHA512

992cf63de006f8f737b499c15903642d47d68004f1ab3d9709d3cb9f590f47b978dab8339e93a1fd4189d4bdafb77f73ea4930b6dd42b90c08844b3af616c06e
SSDEEP

1536:1KPqMC5A+T9Pr3RWoegeuz/cKy3Crkz33vbxv/4XSG7vrB+cbNx2JlHQIVpEghq:hPr3Rxegeuzcp3CrkzvO7lZ4JlHQopE5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
084089b06649c63436a4c5ae64ee75ab

Files

084089b06649c63436a4c5ae64ee75ab
.exe windows:4 windows x86 arch:x86

858b6ac830f2534ff9480aa7beff2088

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstChangeNotificationA
ReadProcessMemory
GetConsoleProcessList
LZStart
lstrcpyn
CommConfigDialogA
GetStdHandle
FindActCtxSectionStringA
GetSystemInfo
SetComputerNameExW
BuildCommDCBW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 77KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE