89e4cf2d8a0c238df3ed5bd1233fee8a | Triage

Sharing

General

Target

89e4cf2d8a0c238df3ed5bd1233fee8a
Size

6KB
MD5

89e4cf2d8a0c238df3ed5bd1233fee8a
SHA1

7db93ca8e2449996b6aa315969b13addf610a6b4
SHA256

7549a6dd3a9c6a572d5ddbcbed59389330dc25dd60e79d01c68bfed771a6827e
SHA512

a589f8b8117343d19817662d5151a588fa61e80cb75a6c6756eb94d6c7ce6ef31bd24d1340c151d514496c5ac17acfaed7494aae1be522ce66ee380ca5d62e46
SSDEEP

96:z2geTJVIeoT2MOfR86KKB/WyWBNOhuMBeOQtoVTHFma7izIyI1PlRQgWgKv11AWH:qFoeoT2MiK6K44MAo4obbVSv0WlQPHSN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/virus_gen033a.exe

Files

89e4cf2d8a0c238df3ed5bd1233fee8a
.zip
paxor.SED
virus_gen033a.exe
.exe windows:4 windows x86 arch:x86

6d1097c6d6d70caeda28cd0f2d2a0a93

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
fprintf
free
malloc
printf
scanf
signal
system

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 112B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 724B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE