c8a758cc4284e5b14c3b00348bade6286b9d2f2b705727e1773350f477779abf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8a758cc4284e5b14c3b00348bade6286b9d2f2b705727e1773350f477779abf
Size

55KB
MD5

829efc0ebbf7d11780c0fe863198b5cd
SHA1

4139b316d5877f6a2687af1c640f049258ddd801
SHA256

c8a758cc4284e5b14c3b00348bade6286b9d2f2b705727e1773350f477779abf
SHA512

0a9b054e2a1af78be6cd66c299ef2ed1835f694ef5c3ae1002a93f8700e81e4b3354976d966a4f464fbd796c018ff1c3f579285fae1a16fc025822d4cd85a5cb
SSDEEP

768:yFP1D3vp1qUjP/H2RFLPxU+bt3+VIiCsTYhXwKZwrh9TYkPpN0qlPvYVt3JHz8yo:0Bvqr9PxDt3+VI+YVfwrdMZJJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8a758cc4284e5b14c3b00348bade6286b9d2f2b705727e1773350f477779abf

Files

c8a758cc4284e5b14c3b00348bade6286b9d2f2b705727e1773350f477779abf
.exe windows x86

00e24b270f04dc51172be33fdeca02d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExW
RegSetValueExW

kernel32

ExitProcess
GetLastError
FreeLibrary
GetCommandLineW
GetProcAddress
LoadLibraryW
WritePrivateProfileStringW
ExpandEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

user32

wsprintfW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE