89cfdc9f344bacbeffa72c6dfc49b76a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89cfdc9f344bacbeffa72c6dfc49b76a
Size

89KB
MD5

89cfdc9f344bacbeffa72c6dfc49b76a
SHA1

bee1d08cfd9416ce755b6aa31c113107f5ecffc0
SHA256

f8d06d6e60e640b2c17f1396546148587d8054356d27c003eb6ab741ecba9d0a
SHA512

525b6226d3119d6a698615dc6d0e56966e90d6c79fcbf281a90541e2402e6f4f0063623a1ae2d4804d587dc53b239159c75aecce800c4210992f90a3df3412a3
SSDEEP

1536:quf3veBAxOBWEPP8ilDENcl1GWFn/Cnc4YoLKFTrt9JTsPWCbd6TNYRETyH:R/ekOBLHzRvtmc47KF19GKTNRTyH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89cfdc9f344bacbeffa72c6dfc49b76a

Files

89cfdc9f344bacbeffa72c6dfc49b76a
.exe windows:1 windows x86 arch:x86

b6fb89fcc6ef29d8fe7890630dcab598

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetCommandLineA
GetCurrentProcessId
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
CreateFileA
ReadFile
RtlUnwind
SetFilePointer
WriteFile

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

crtdll

__GetMainArgs
exit
free
malloc
memset
raise
rand
signal
srand
strcat
strchr
time

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 596B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 924B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE