b89a441d01285f082d88fd2b21ddac97 | Triage

Sharing

General

Target

b89a441d01285f082d88fd2b21ddac97
Size

270KB
MD5

b89a441d01285f082d88fd2b21ddac97
SHA1

b32cb178d265505d82dbf516b3f69575006d18bb
SHA256

42578f5bce0136e5d145f709db10d259319fb1fb112a891ccef41d65a0432456
SHA512

e545b2b0e86f043882469993be4e52bc4997555eeda1d61d3baec5f6803d9b54589db25afa21ed8e9958c9f5754eab2d7fe697a09dd921861a1c02a7c4cd7264
SSDEEP

6144:4hGqYfzdnK22EWU9Ovvg55w4V4dMrubjyl4k00sDtz5W7xLYHJv:eGVW0we5w4A/jyl4k0JFWFCJv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b89a441d01285f082d88fd2b21ddac97

Files

b89a441d01285f082d88fd2b21ddac97
.dll windows:4 windows x86 arch:x86

9a5b7a6d26cab3086fdf0a99839d0078

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
ExitProcess
FlushFileBuffers
GetDateFormatA
GetFileSize
GetSystemTime
GetSystemTimeAsFileTime
TlsAlloc
lstrcmpA
lstrcpyA

Sections

.text
Size: 22KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ