89a0916394392cd02d37c020f452dda7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89a0916394392cd02d37c020f452dda7
Size

141KB
MD5

89a0916394392cd02d37c020f452dda7
SHA1

21b544e60aba93775ab4b48e8be38417daf5a112
SHA256

ea6fc8d2fd1b329f725874b058875dbe6ee7922e662106838cee2f3fdc5630d2
SHA512

1cea6488b61c0a867bebf2f535c644e6443f258032cf330c1756ac9e7bdcc5315efdedc29f607a454c397045733bf2282ee20d1bf1a56ac9adeef1e18e48e389
SSDEEP

3072:ccDsWA8kXDAX2YAVvc09v4HYLFk8jwaaHw7Koj4rhxxxxxxxxxxxxTk9:FwWAbXN5VE0yYKxxxxxxxxxxxxT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a0916394392cd02d37c020f452dda7

Files

89a0916394392cd02d37c020f452dda7
.exe windows:65535 windows x86 arch:x86

f88cc8576d13de0c893657d969bdc379

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
SetConsoleOutputCP

advapi32

RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegFlushKey
RegConnectRegistryA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE