86c9bab5ef7c154b5819a4fc228c7168 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86c9bab5ef7c154b5819a4fc228c7168
Size

52KB
MD5

86c9bab5ef7c154b5819a4fc228c7168
SHA1

a93930e71a1b03391d894d9f1050ac62d19c6e55
SHA256

e457455dea0021379abbf858cf51e6d3d4f263a1a25c8957e0ac5dc769b0359c
SHA512

1590e270b4a08fee1bdf4816fb8800a0f738aa306b55eee674d51949e0c6e7e37d915105b7af69e03be0ccda1e245b638c02106b3cbeb435825ef8c56049f186
SSDEEP

768:tC5laSEProG5yYsem8NGwBMR6XjLy6YWuoGG1:05lFSsefNhMUXvyDoGG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86c9bab5ef7c154b5819a4fc228c7168

Files

86c9bab5ef7c154b5819a4fc228c7168
.exe windows:4 windows x86 arch:x86

bf41bba1e3d070214dd16fbd10ad537b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
WriteFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
SetFilePointer
ReadFile
CreateFileA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE