873b80be03e70c39fb0b2dabf4bfee8679c7f9b08aca79b6e8708facc912dda8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

873b80be03e70c39fb0b2dabf4bfee8679c7f9b08aca79b6e8708facc912dda8
Size

67KB
MD5

33dda9225a8048bdfb663133f18f4c85
SHA1

3474a1fd9a50b879a8a987c0e5d61540f52f1778
SHA256

873b80be03e70c39fb0b2dabf4bfee8679c7f9b08aca79b6e8708facc912dda8
SHA512

5bb83aaffad813a79fd6dfa1f58b20ecd44a7ff381bc62d0205d337b6fa279d7aadb7c8d00fa2761ecddb0ca9074f575a390c72e870868b940d8767ea7b6abf5
SSDEEP

1536:c9TRukIVaR/SsQlu81Znc3sX1xvShy3QiTejdJcQro+FmfstzK:yQ7SMu81O3sKiKjrcQk+F9K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
873b80be03e70c39fb0b2dabf4bfee8679c7f9b08aca79b6e8708facc912dda8

Files

873b80be03e70c39fb0b2dabf4bfee8679c7f9b08aca79b6e8708facc912dda8
.exe windows:4 windows x86 arch:x86

95d22efdaeae1a7256d1f141b32da211

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseConsoleHandle
HeapLock
AllocConsole
SetProcessDEPPolicy
GetConsoleOriginalTitleA
GetLogicalDrives
VerifyConsoleIoHandle
UnregisterWaitEx
GetProcessIoCounters
SetHandleContext
SetEvent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE