0189b704b7e1f909f470764be7bbc232 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0189b704b7e1f909f470764be7bbc232
Size

6KB
MD5

0189b704b7e1f909f470764be7bbc232
SHA1

fa831c48915266ea7da33095d4669afd206abba9
SHA256

64b823e289565e22a50378278623906fdd8f952778fec84f87ee3b131333cfec
SHA512

5c5fd361b46245d785f7340ca08d8548bbd4bff8b95c98e6c706a3629c309b9d174f8aefb29d12ec2641ee64483cf95009b3a656e2d2284109f2fb01d2da79a4
SSDEEP

96:zBM4g3GwxrfkLYTza3b7GuOOYH2Z5OZS7PJhhbfUF/hO2yDg2grwa:9uDbJ0euFZ5zJrDUFpjwa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0189b704b7e1f909f470764be7bbc232

Files

0189b704b7e1f909f470764be7bbc232
.exe windows:4 windows x86 arch:x86

0c12c1d512453ee9c2574ef52bc5167b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcAddress

psapi

EnumProcesses

Exports

Exports

getBuss
getCuss
getMuss

Sections

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE