87b7054b34f7554b2002c690cc399340 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87b7054b34f7554b2002c690cc399340
Size

329KB
MD5

87b7054b34f7554b2002c690cc399340
SHA1

bb78952e20b0102fcf22bc8c6f70668ff33829f1
SHA256

86091e3dec5bcc2a12dab0fbe022f3842e5f47013a9be562bc027f4bbc86015b
SHA512

07a48d1fc16903b133cb116a4b39d259a241a632065ddca2e1f8bf39f83957867e29d1234151990d9b4911a87518b615ccb4c87eeffd7ac5703d31c24c25ba1a
SSDEEP

6144:4fLf6071TwoM6xsgpSsUkpG/rWmowOu1nHVlPYp97OMuQIFih8oYEG:4fLfHH9x75GWm2u1nHVlPY7yMuhg8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87b7054b34f7554b2002c690cc399340

Files

87b7054b34f7554b2002c690cc399340
.exe windows:4 windows x86 arch:x86

430aade6e36fb6834550584da171bef5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
GetProcAddress
CreateFileA
GetCurrentProcess
GetWindowsDirectoryA
SetEvent
GetModuleHandleA
GetCommandLineA
GetCurrentProcessId
GetVersion
GetTickCount
GetLastError
GetCurrentThreadId
GetCurrentThread
ExitProcess
VirtualAlloc
GetStartupInfoA

user32

CreateWindowExA
LoadCursorA
ReleaseCapture
SetWindowTextA
LoadBitmapA
GetDC
DestroyWindow
EnableWindow

msvcrt

_onexit
__dllonexit
_controlfp
_strcmpi
_except_handler3
__set_app_type
__p__fmode
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 313KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ