189689976c34ddd30851c1200f28bad5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

189689976c34ddd30851c1200f28bad5
Size

24KB
MD5

189689976c34ddd30851c1200f28bad5
SHA1

8db16252ce1d1e4d5b73c3b881856a6d9f91a3c5
SHA256

e415475733b4c444f93bed53e2e7d349cf4b6136e276c6721087b09fb5b7e5ce
SHA512

7d07cfab2800569ee98c71f966b7d980fc771d4b4c72c471a6a0e6f7d71ec531f9fb04b85e0bcf52d0b74840a82df9e802e394315b45df86774e2228a8253f2e
SSDEEP

768:qMZdPpd1LTRYR8VHGbiRrJZBo5DT9g1inJ:/dHxM84IlLo7gQJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
189689976c34ddd30851c1200f28bad5

Files

189689976c34ddd30851c1200f28bad5
.exe windows:4 windows x86 arch:x86

da1d2c0113c90fcbf52121dd950b34cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetBinaryTypeA
GetCommandLineA
GetConsoleCP
GetConsoleFontSize
CreatePipe
FindResourceA

msvcrt

_atodbl
__toascii
_adj_fprem
cosh
_chdir
strcmp

Sections

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE