86ec0b7c8dafd48a4ce2ad242ec3e66d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86ec0b7c8dafd48a4ce2ad242ec3e66d
Size

28KB
MD5

86ec0b7c8dafd48a4ce2ad242ec3e66d
SHA1

d9f10e0e66543bdbbcf73fcc9eb0768d01daf2ad
SHA256

cb658b0070495e0671bbd03eb9d8a5aa1cfb663c4431a07ae628c6f0f2b47031
SHA512

8216bf51b60556332c57e9c010525fad510aa4b26d11995104c9e8af11e8b6178d3d81d809efaf46d26a5be54cc1ab59f574a09a6d2dcbec24fc9235c6df3561
SSDEEP

384:Q/BSpPxda3zYbBm2PVimasExraJPnFjFThPLClyGa3bQBbtDXhNSL1:Q/ULE3M9HtiZsEraJPh+EGaLQBbtLhg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86ec0b7c8dafd48a4ce2ad242ec3e66d

Files

86ec0b7c8dafd48a4ce2ad242ec3e66d
.exe windows:4 windows x86 arch:x86

ba795fdff7da6ff1999d60b0e77cf451

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentThread
VirtualQueryEx
VirtualProtectEx
ExitProcess

user32

CreateCaret
GetForegroundWindow
ShowCaret

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bknghq
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ