989661131fb029897d11d650fecde00d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

989661131fb029897d11d650fecde00d
Size

98KB
MD5

989661131fb029897d11d650fecde00d
SHA1

46b4811f231ce319265dc03008099de0a08ea6f9
SHA256

d87f6ed25acb18ea8b85716b796f02041e3aacb049f049e7b13d18ee31f0dbf9
SHA512

cc48afb9472eb2a9b8d95f487de4012ef447c2af9f95611cf3be84e48eb2adfcb79f15d4dd55ebf3ac7d29b1e258977fb4b32048ee46a01ae546f941e77bd4fd
SSDEEP

1536:zVM3A8NARfZiujF/U278MjrClhhJBPi9dct5Nt+r5ecK3hx70FQJKABG5Fs+:zVMQFRww9U2mvJk9S5NtBXQORBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
989661131fb029897d11d650fecde00d

Files

989661131fb029897d11d650fecde00d
.exe windows:5 windows x86 arch:x86

085712717d99c7418900a479065b3756

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
VirtualAlloc
GetModuleHandleA
ExitProcess
LockResource
FindResourceA

oleaut32

VariantInit
SafeArrayGetUBound
SysAllocStringLen
SysAllocString
VariantChangeType
VariantClear
SafeArrayAccessData
CreateStdDispatch

msvcrt

_chgsign
_cgetws
_close
_chdir
_assert
_atoi64
_access

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ