89b927546424e62b6a546b455fbfb2af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89b927546424e62b6a546b455fbfb2af
Size

5KB
MD5

89b927546424e62b6a546b455fbfb2af
SHA1

18bdf98c9694298ae7445f6fdcc3bf77b8194479
SHA256

c183cd35430794d290e0df81968df851004d8cadc6a1cee4753ae5bc044e2d2a
SHA512

66c60acab18a98d785c3db8f4959f19c1a19750ee7f59c0655dc198d3703b89a228e36e5c1e66e567c57fa145930ec776142aa4cc35cf7e2d7a345fbc71d3b73
SSDEEP

96:XXuf5aLwmTMAYWsq79JwfESFyM3W3B/cxWw9en:X2Ab5XwfEpUxWH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89b927546424e62b6a546b455fbfb2af

Files

89b927546424e62b6a546b455fbfb2af
.exe windows:4 windows x86 arch:x86

8703dc23399db9fa45ca941c6c8f2407

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
lstrcpyA
lstrlenA
CreateDirectoryA
ExitProcess
GetLastError
CloseHandle
CreateFileA
MapViewOfFile
CreateFileMappingA

user32

wsprintfA

shell32

SHGetSpecialFolderPathA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE