8f24b7da7ebaf43ad348efd4084cb19b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8f24b7da7ebaf43ad348efd4084cb19b.exe
Size

1.8MB
MD5

8f24b7da7ebaf43ad348efd4084cb19b
SHA1

19ed4f1bb0554444b77f307faf2af8bdcbdc39f9
SHA256

6b9bb707d5fab4e45abeb7798ee0d90e019c032040c02e89dd2ee0ca1f81caad
SHA512

fb6ff09ec44da77bf54c1356daaca3d1ab82f5d4c9586bf60ed55cd1497989709c3c68efb5bf6e6191187c24ae96a45cd247a74052f250ee5b11bdf8ff6ba1f5
SSDEEP

49152:2EDR7fB46PaKsbem2+6yWtwFdTHPN9UYH2C2SuikZrxpl:2KR7B460j96yWtwTTHr9uikFzl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f24b7da7ebaf43ad348efd4084cb19b.exe

Files

8f24b7da7ebaf43ad348efd4084cb19b.exe
.exe windows:6 windows x64 arch:x64

162b3f168246672b947871599296b794

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateFileA
CloseHandle
CreateFiber
SwitchToFiber
CreateThread
SuspendThread
GetFileAttributesA
FindFirstFileA
FindNextFileA
GetModuleFileNameA
GetModuleHandleA
SetFileAttributesA
SetEndOfFile
SetFileTime
CreateNamedPipeA
PeekNamedPipe
ExitProcess
VirtualAlloc
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
HeapAlloc
GetLastError
HeapFree
GetModuleHandleW
GetProcAddress
SetLastError
GetStringTypeW
MultiByteToWideChar
GetACP
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsSetValue
FreeLibrary
LoadLibraryExW
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
IsValidCodePage
GetOEMCP
GetCPInfo
GetModuleHandleExW
WideCharToMultiByte
HeapSize
HeapReAlloc
CreateEventW
RtlUnwindEx
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
CreateFileW

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

162b3f168246672b947871599296b794

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 1.3MB - Virtual size: 1.3MB

.pdata Size: 2KB - Virtual size: 2KB

.gfids Size: 512B - Virtual size: 36B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1024B - Virtual size: 728B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 1.3MB - Virtual size: 1.3MB

.pdata
Size: 2KB - Virtual size: 2KB

.gfids
Size: 512B - Virtual size: 36B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1024B - Virtual size: 728B

.reloc
Size: 1KB - Virtual size: 1KB