89749f91694f42c19f3f1f580af99434

Sharing

Copy URL Twitter E-mail

General

Target

89749f91694f42c19f3f1f580af99434
Size

178KB
MD5

89749f91694f42c19f3f1f580af99434
SHA1

0d837fa1d1758c11e915adbdaf236a1a5143ffb5
SHA256

21a2ea24f97b6c064e1e2fe34e108e337223f000539ed9ac6286cc8a21938db2
SHA512

e4e988f3a3c8a1af2f22d7f3fff8afe24137bb85ccbacf0a6ac6abc6df9054dfe16fb3e046caee030de8b50355e21f0968d6c3cb4cdba24a28a463b9574b38fb
SSDEEP

3072:3XbpgSH0MZyvfy9QkWx7QW1o2wuxEBMdqXwzRhulSCEZCSurTmaKDEk1Jodng:3Xd9HUKLE7oLHXKhulS/Zr1E23

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89749f91694f42c19f3f1f580af99434

Files

89749f91694f42c19f3f1f580af99434
.exe windows:5 windows x86 arch:x86

c89f1892a39fcb1e5baf19f645e0fc3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Utility\Manager\Bin\Descript.exe

Imports

shlwapi

ord29

kernel32

lstrlenW

user32

CharUpperA

Exports

Exports

?RestrictReason@@YGFPAUHWINSTA__@@PAUHWINEVENTHOOK__@@@Z
?SeasonProgress@@YGFPAUHWINSTA__@@PAUHWINEVENTHOOK__@@@Z

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.s2
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.s4
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.s7
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.s6
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.s5
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.s3
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.s8
Size: 143KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c89f1892a39fcb1e5baf19f645e0fc3d

Headers

File Characteristics

PDB Paths

Imports

shlwapi

kernel32

user32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.s1 Size: 512B - Virtual size: 28B

.data Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 200KB

.s2 Size: 512B - Virtual size: 228B

.s4 Size: 1024B - Virtual size: 658B

.s7 Size: - Virtual size: 4KB

.s6 Size: - Virtual size: 4KB

.s5 Size: - Virtual size: 4KB

.s3 Size: - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 1KB

.s8 Size: 143KB - Virtual size: 142KB

.text
Size: 26KB - Virtual size: 25KB

.s1
Size: 512B - Virtual size: 28B

.data
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 200KB

.s2
Size: 512B - Virtual size: 228B

.s4
Size: 1024B - Virtual size: 658B

.s7
Size: - Virtual size: 4KB

.s6
Size: - Virtual size: 4KB

.s5
Size: - Virtual size: 4KB

.s3
Size: - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 1KB

.s8
Size: 143KB - Virtual size: 142KB