989cf83aa1465cb5fc64f1dd94e4a5d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

989cf83aa1465cb5fc64f1dd94e4a5d0
Size

56KB
MD5

989cf83aa1465cb5fc64f1dd94e4a5d0
SHA1

409dc95e8d4b7a7d4482a57e9479607e85e8e2cb
SHA256

7dd228a9bb0a121f38e7365aa08caa5f00104c353c7a02c446c372b6024916a9
SHA512

c40a6881bdd7d940fc938c4fb5be22c0bae18e51d950503986b722850fa8d375dd8e1b1ae168ee3624374c7a68360dc42cda4e739fe79a4107f78b88d4ff5e54
SSDEEP

1536:E/w2xXL3c+q/N9EfYhW1K2EvBS8Db8sCIYg:ENxb3Bqw1U5MIYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
989cf83aa1465cb5fc64f1dd94e4a5d0

Files

989cf83aa1465cb5fc64f1dd94e4a5d0
.exe windows:4 windows x86 arch:x86

84992d0a23b687f0b9b2360bf6754028

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleInputExeNameW
SetConsoleMaximumWindowSize
OpenMutexA
WaitForDebugEvent
VDMConsoleOperation
SetComPlusPackageInstallStatus
SetComputerNameExA
SetConsoleMenuClose
CreateJobObjectW
EncodeSystemPointer

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE