87d56064602dfb19dfe478f310ac60d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87d56064602dfb19dfe478f310ac60d6
Size

123KB
MD5

87d56064602dfb19dfe478f310ac60d6
SHA1

5ed971a193fee9f4130278b62b8442aae9247b89
SHA256

85337e4fb8d3c101b531be0bc53a8e53cd4dde134ce02143d9eea9bc4e248ca5
SHA512

c42364870f4db8934476a1c790defc50b2374589dad92ecec4afdca67107b707c4f2591427ad3f4f5441b1a4534a3ec1d0e4a734ec90097825759d4d0b787ae8
SSDEEP

3072:Y8scDr4c+RBOR8uRdcUumLe4VE0JyZE3IxN:VdDrmBcdq4VEXEqN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87d56064602dfb19dfe478f310ac60d6

Files

87d56064602dfb19dfe478f310ac60d6
.exe windows:4 windows x86 arch:x86

c5d40a6a07b3b636efd3e3eebb537395

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleOutputCP
CompareFileTime
SetVolumeMountPointA
SetTimeZoneInformation
CloseHandle

ntdll

RtlTraceDatabaseEnumerate
RtlIsValidIndexHandle

user32

SetCursorPos

advapi32

ControlService

gdi32

SetTextCharacterExtra
SetStretchBltMode
SetROP2
SetLayout
SetBitmapBits
SelectClipPath
IntersectClipRect
GetTextColor
GetStretchBltMode
EnumObjects
DeleteObject
DeleteDC
CreatePatternBrush
BitBlt
ArcTo
AddFontResourceW
AbortPath

shell32

SHGetSpecialFolderLocation

inseng

CheckTrustEx

Exports

Exports

AOHNHnNme0ZZ31rq
GMWc2oZnJjV
Kcy
e8tzmo3

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE