89a8bdb6fd63dfe3c272bf73a5d8013f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89a8bdb6fd63dfe3c272bf73a5d8013f
Size

5KB
MD5

89a8bdb6fd63dfe3c272bf73a5d8013f
SHA1

b7fc51f88e2ca9e559c7ad3602aace7d25f1a341
SHA256

ce533f229dd75b5e7b8db11e6adec9aa2c273f877b48e56e6367477725a3515c
SHA512

6fba458938c19f10ff5c85b35efd9b6443f62a32d784cb9d4c2addf4271f9d25e529188903fb60f62d95c48b6a4cae2c854ac7b54b6c3ee078d921249cdf9881
SSDEEP

96:nO30H0GV2/wUqGhjmOhSUGJO/OTwmvBLs/31nld2PjxV:nI0H0G6wUqG9mOhSUGJ8OTVvBwlLi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89a8bdb6fd63dfe3c272bf73a5d8013f

Files

89a8bdb6fd63dfe3c272bf73a5d8013f
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ