008c8cabae7ee0ca0c40141c9713775d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

008c8cabae7ee0ca0c40141c9713775d
Size

234KB
MD5

008c8cabae7ee0ca0c40141c9713775d
SHA1

54e21e35d2b9847a1000d58a2606d7b9861a9d1c
SHA256

22dfb9873af881f4e1f29608b3c592a8cc6973cfde4303dbc9d39d5756aaad7d
SHA512

60b32abd211e134e7e146ccd2e5278fa428b9e1a4702f5255f96f859fabbabfba8fd553457f3a9e3360d0f2f689dc4fdae98abfe1609490d55fc2c02657c08aa
SSDEEP

6144:ZZEOkR7Jjv5VJ3kfD8z2Cql4m0H1fceRbhw3eB9z7bFYf:ZZENR9jvefgC105ceRW3eBnq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
008c8cabae7ee0ca0c40141c9713775d

Files

008c8cabae7ee0ca0c40141c9713775d
.exe windows:4 windows x86 arch:x86

2117b772398160f63265d332d71afd78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
fopen
fseek
fclose
strlen
memmove

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
WaitForMultipleObjects
CloseHandle
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore

user32

CallWindowProcA

winmm

mciSendCommandA

Sections

.code
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE

..
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zaer
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ