989f48e17d87d461bd15ff6b54cb0782 | Triage

Sharing

General

Target

989f48e17d87d461bd15ff6b54cb0782
Size

115KB
MD5

989f48e17d87d461bd15ff6b54cb0782
SHA1

4e53390b2eb6d97177b9c54a88e683a5b5b7faf5
SHA256

ef6a072d21cb04a8302bc5fa6a39b243ee3f00661c4dc44d88eaefc42e15a941
SHA512

8e9296c9930a4e533a0863d57823eb41eddf39ae73475f2cbb7754e9883e1618cd76ce586f9a26b32bd9de8fd0a1ec32c4f876a0674090a6523e32ecc37db0ce
SSDEEP

3072:sU+kqInwyBk7qKDszv64Gqobd1C14nn0ELi3aOSBSr:V+rInwyBqqKDszvBGqCpnpO3NP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
989f48e17d87d461bd15ff6b54cb0782

Files

989f48e17d87d461bd15ff6b54cb0782
.exe windows:4 windows x86 arch:x86

7dbbae6a34c302dd59f870b2404d2a90

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
GetPrivateProfileSectionNamesA
ReadConsoleInputExW
MapUserPhysicalPages
SetUserGeoID
FileTimeToSystemTime
SetMailslotInfo
GetStringTypeW
GetConsoleFontInfo
MultiByteToWideChar

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE