089ea0244ee512796014efab7c146a39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

089ea0244ee512796014efab7c146a39
Size

20KB
MD5

089ea0244ee512796014efab7c146a39
SHA1

0f0a93a9f99e19c2157b98121b93d83f5630a486
SHA256

13dd86eb01435a3687485ffbc6e3dd1aa0966dcb0d2e91ffb1145884294aec47
SHA512

d6d93334e3de99117879d7d37363ab83e0dcffbaffcb70db85acb6830e3311c026a182c5927b8f373b541586acf6117b7d81f14ef08ebd1c0692689fcf60d6d4
SSDEEP

384:Z9Q/Jr45lLimy72W/456JHUgjWb/BBjeoZp5EjlmA2mn0j/sth/CYW:E5bJ45KBcHjeoGjsrA0gQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
089ea0244ee512796014efab7c146a39

Files

089ea0244ee512796014efab7c146a39
.exe windows:4 windows x86 arch:x86

af463dc7be06062e2e5bedfc0791fe89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess
GetProcAddress
GetTickCount
LoadLibraryA
Sleep
CloseHandle

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ