860abe96221a9b851d8090d0e3603fd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

860abe96221a9b851d8090d0e3603fd8
Size

2KB
MD5

860abe96221a9b851d8090d0e3603fd8
SHA1

cf7649e0673ace3ad80a50802e376e2ebe62c4e0
SHA256

5319a84a50860261f41d1bb33d7054a3817bce9077cb42f64638668424110c79
SHA512

4fc76b08ee015a60742f2efd134a9098f5425678f5f170c5bba0f6d5fb958d88e28a0b64da5f1c88a890e5e0b515962010ddf385601e6cb8905d944d23764999

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
860abe96221a9b851d8090d0e3603fd8

Files

860abe96221a9b851d8090d0e3603fd8
.exe windows:4 windows x86 arch:x86

5673cb341649dc9a479243017c0012f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcpy
strstr

kernel32

GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA

user32

CharLowerA

Sections

.text
Size: 512B - Virtual size: 462B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE