89b66f074955f8577ec63e610398b90a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89b66f074955f8577ec63e610398b90a
Size

17KB
MD5

89b66f074955f8577ec63e610398b90a
SHA1

940ae3811239dc7217c0e8afb2a7c21a03335dfe
SHA256

dd8e98b775e28bc3e3dfac1960bdb9c6026bc3444cb634a54cf651193283a578
SHA512

704d130eb0c739eb32d15d8993530c1498da3ee5d181afa2a14a59f012d74e9d1297570ecb37be493fdb99f9b80161b4deed87afc9a15b4451005eb12b271cf6
SSDEEP

384:lmEh3HoOOMTOpb80EICjw7FLk0uCSClPNx7t1dzlWcUTi36xTzI:/RIOcqe7FLBuzaPNx7zWzTim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89b66f074955f8577ec63e610398b90a

Files

89b66f074955f8577ec63e610398b90a
.exe windows:5 windows x86 arch:x86

4710e694cbc904bbde58b1960e1a3f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\XRoot_Build\XC\Vm\Release\x86\StubExe.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
SetEnvironmentVariableW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetFileSizeEx
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ