8f4f0f21bbfffb25458b2a62c79b73e321bcb478c2cee67173bc91ebb76ff9d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f4f0f21bbfffb25458b2a62c79b73e321bcb478c2cee67173bc91ebb76ff9d8
Size

108KB
MD5

4cbf6800cb448d8ac1fb0fd2d1aa6982
SHA1

b4745f60e3677cd48967af1a87f0b67869bcd6e9
SHA256

8f4f0f21bbfffb25458b2a62c79b73e321bcb478c2cee67173bc91ebb76ff9d8
SHA512

0756cb4758947755dc88a954125c63f4a67ec6ad03fe6495c0d5fc9566747f683f218999f654080c3994f13d97f9c9fdc25dc459d494b50105e7b81ffaad575c
SSDEEP

384:vV080TIq01kYJJJbub4On4LRzV5Ct/1E:va5Iq01khbbCjC3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f4f0f21bbfffb25458b2a62c79b73e321bcb478c2cee67173bc91ebb76ff9d8

Files

8f4f0f21bbfffb25458b2a62c79b73e321bcb478c2cee67173bc91ebb76ff9d8
.exe windows x64

f20b34ab44cf463fc5418196d1f3b998

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

wininet

InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA

crypt32

CryptStringToBinaryA

kernel32

GetProcessHeap
VirtualProtect
HeapAlloc

user32

MessageBoxA

advapi32

AllocateAndInitializeSid
FreeSid
CheckTokenMembership

Sections

.text
Size: 1024B - Virtual size: 835B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ