89244ed6f350287aae493699340bd046 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89244ed6f350287aae493699340bd046
Size

168KB
MD5

89244ed6f350287aae493699340bd046
SHA1

d1a35a328650c994c1e37999a86dbb4d51d6829f
SHA256

bd396b15953e561081043ac272c32ab7730887f5b97f9ecace8bc90048fb0697
SHA512

a7881354737093e4d40d87a80a3775f40c166500df829574745280540616fea0c5edf22719c675ab1b6a198a0f0e8cb0af081c02a31a27e709d54153e40c2cc2
SSDEEP

3072:4xvmc/kRikiH0gg4kyI+5F26oPF/zI56Tpfu4WsLGgfGs:4xvPIiUwrGw6NSsLdfGs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89244ed6f350287aae493699340bd046

Files

89244ed6f350287aae493699340bd046
.exe windows:4 windows x86 arch:x86

33422f3c3363135acb2ee674b0e1053c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyA
RegEnumValueA
RegDeleteValueA
RegDeleteKeyA
RegCloseKey
RegSetValueA

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ