86fed0f3618623bd0be708e6730e80b2 | Triage

Sharing

General

Target

86fed0f3618623bd0be708e6730e80b2
Size

432KB
MD5

86fed0f3618623bd0be708e6730e80b2
SHA1

33b171d01bb84d634a34c66c84512e1bf3a2c5f3
SHA256

b221c5e51a3297b33b9c77c8eeb871ea7cd08ca0e9a3b63016221394db4130f8
SHA512

1232b3e9d853f5f26a2a0a1764114ca3bce51220e38f9912dcd60966982cad50d83f07425607178faaf2b632eaeccfbc9b923c45675c2f8b4dd605d51b4f2936
SSDEEP

12288:BXqxKMybYnj8lQxdR1vIaauj1SACRA+rXrKj:Zqxnnj3hNauksog

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86fed0f3618623bd0be708e6730e80b2

Files

86fed0f3618623bd0be708e6730e80b2
.exe windows:4 windows x86 arch:x86

d070b42f91c69ff2429495b024e80172

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
GetCurrentProcess
CreateFileA
LCMapStringA

user32

wsprintfA
CloseWindow
CharLowerBuffA
SetWindowLongA
CreateWindowExA

advapi32

RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegDeleteKeyA

Sections

.text
Size: 4KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ