87b92fcdf71aabad5544c8dd0809a5da[.]bin

General

Target

87b92fcdf71aabad5544c8dd0809a5da.bin
Size

41KB
MD5

87b92fcdf71aabad5544c8dd0809a5da
SHA1

283c2a868433e2465d57444c1799411f092b247a
SHA256

c4e1e3fae8377ae0245e9530e63b4610cd8d70db7482cca1cd39fc8cbc0ca099
SHA512

8d5b88d3f8ef581b726dae7e38d0658d5d65dd9445d2b0be08b215e499ffff4a909200903e71a04ec1406cbfa8a0b519a2eba33839d68573f027457d64233822
SSDEEP

384:gURNnjPwzf7ntn3y7zci/jyrlhOtyu7TwzQOL+ybVcRPLMCHwzQOL+ybVcRPLMCf:NTciCH4No86c5Qp86c5Qp86c5Qc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
87b92fcdf71aabad5544c8dd0809a5da.bin

Files

87b92fcdf71aabad5544c8dd0809a5da.bin
.exe windows:4 windows x86 arch:x86

fad55c6d77bc09ee44506cab7635f936

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

AddAtomA
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
OpenProcess
ReadFile
ReadProcessMemory
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
WriteFile

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
getenv
malloc
memcpy
memset
signal
sprintf
strcmp
strcpy

shell32

ShellExecuteA

user32

DestroyWindow
FindWindowA
GetWindowThreadProcessId

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fad55c6d77bc09ee44506cab7635f936

Headers

File Characteristics

Imports

advapi32

kernel32

msvcrt

shell32

user32

Sections

.text Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 368B

.rdata Size: 1024B - Virtual size: 640B

.bss Size: - Virtual size: 1KB

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 29KB - Virtual size: 29KB

.text
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 368B

.rdata
Size: 1024B - Virtual size: 640B

.bss
Size: - Virtual size: 1KB

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 29KB - Virtual size: 29KB