87ae326862f36a1b8d9a732b94a37aa1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

87ae326862f36a1b8d9a732b94a37aa1
Size

3KB
MD5

87ae326862f36a1b8d9a732b94a37aa1
SHA1

9e817bd25e860a9ec7cbdc5116d30066d717b3e1
SHA256

6536d20fbd9f38d12ec28c3a17d404f2821eaa589229e66b4521d290ee95610b
SHA512

7619066a8b1a78a9e5dc24e06d2e511a2cf1afb1618b04febb148386e6e0447d75c5466cccc0b90d2dff5e128eb7ceb9b0401535c7ea2afea30dd6ff9c77db34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87ae326862f36a1b8d9a732b94a37aa1

Files

87ae326862f36a1b8d9a732b94a37aa1
.exe windows:4 windows x86 arch:x86

61a4c385e7c68f17b335f66789b310ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
VirtualAlloc
VirtualFree
ExitProcess
GetFileSize
WriteFile
ReadFile
SetFilePointer
CloseHandle
WinExec
lstrlenA
GetCommandLineA
CreateDirectoryA
CreateFileA

Sections

.text
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ