89dc31ec198b582c9b6634e531714ccf | Triage

Sharing

General

Target

89dc31ec198b582c9b6634e531714ccf
Size

56KB
MD5

89dc31ec198b582c9b6634e531714ccf
SHA1

e77a4232ab7be313e1a3cc5e4f639d8b7ac13eee
SHA256

92b421d81c38b686afcf0fb0b0d58b9bb4d02409ea0c8b8e3f94210f82cdd214
SHA512

c9982321588b14211d486e86adf0dbb59be67a4d72a86611ac35939263e04327bb45cd094c2c1ecc98bf43b8f6e45d6facfd16261823b31e60d2474e108bf214
SSDEEP

1536:NJwKMBFvd5mx3LOznmvWy/W8DdY2wf452hzfQSnV69RUs3/jw+:8BFd5mx3LOmWh8xY2wf452hESnnQU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89dc31ec198b582c9b6634e531714ccf

Files

89dc31ec198b582c9b6634e531714ccf
.exe windows:4 windows x86 arch:x86

06df8c43d203e762923dc8ce18d3b4b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryW
GetCompressedFileSizeA
GetStartupInfoA
EndUpdateResourceW
WinExec
LZCreateFileW
lstrlen
AllocConsole
SetupComm
MoveFileExA
ReadFileScatter
GetDriveTypeW
IsBadStringPtrW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE