89aa810286dad8dffa89b8778f4d316cf28d0a2735465e012604d40f1a137608N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

89aa810286dad8dffa89b8778f4d316cf28d0a2735465e012604d40f1a137608N
Size

2.0MB
MD5

617fa88c557de91bf097b0ca1e52a520
SHA1

408d4bcd01564d2958c6b816ff3e6d175306aa61
SHA256

89aa810286dad8dffa89b8778f4d316cf28d0a2735465e012604d40f1a137608
SHA512

a78a9e4ca39d84aafd675d82a227ddf1c2f0084abeb87579d8838c22423086200967ba56e31215360721007d668271a72cfe793ad0470930134806b9ee402e5e
SSDEEP

24576:2h9UalsqrvtvewnBzrSyxjALCBo1GHSEE+nQILK1wJjvoBVDP2jfUx:NqsMvtvewxr1FUr+nQ9qJjvlzg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
89aa810286dad8dffa89b8778f4d316cf28d0a2735465e012604d40f1a137608N

Files

89aa810286dad8dffa89b8778f4d316cf28d0a2735465e012604d40f1a137608N
.exe windows:4 windows

89e7fba27e168930a59d8b759d0a31b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
VirtualAlloc

user32

GetShellWindow

Sections

.text
Size: 672KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE