010089390a645ee986ff77e4215308b8 | Triage

Sharing

General

Target

010089390a645ee986ff77e4215308b8
Size

2.3MB
MD5

010089390a645ee986ff77e4215308b8
SHA1

aeda215942c73dfb68d40cc9417cd073901804b9
SHA256

8984dec715563ca3471dce0dc6dfe869cb176238b31ec924b6731ac60bf3b244
SHA512

b47cf774e39952f73532df78734f73cacee05ca9035f46b8bce54137db91e096a34182ff6a3f214cbe4dcaf786a35bee62e89b4104fdcbb8f0d93baae7434411
SSDEEP

49152:4BM/CI5YtHIiitCO0YFJC8CHGSSIbuBGvx:4BM/Ci6HIT0YF7CHGSSIiBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
010089390a645ee986ff77e4215308b8

Files

010089390a645ee986ff77e4215308b8
.exe windows:5 windows x86 arch:x86

88381b84da56810b869e897e6d45bd58

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

EnumChildWindows

Sections

.text
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bxpck
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.main
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE