0c8e8ad98c58e387dab39b86e016338b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c8e8ad98c58e387dab39b86e016338b
Size

88KB
MD5

0c8e8ad98c58e387dab39b86e016338b
SHA1

9f244c2cbb08a79f3742624705b206bc668d7e5f
SHA256

470d1258b1fd56ed2de422245b58e142c7bdcc56ef9c8c263df3c542c50d34ff
SHA512

58688e6917984877067c68f93b8ef41c175485712092fa08b9c23f9fb6181d617df362e41af933e8b5718e5b2d0762a7de17f0908d996587dc9a105e67fa74e0
SSDEEP

1536:H2yzBCCdVuUB24Ngwy6SogaaQg2oz+xh7z5k7WQ6C1f/I:HHBCCuS24NfyogaaQdozchP57C1f/I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c8e8ad98c58e387dab39b86e016338b

Files

0c8e8ad98c58e387dab39b86e016338b
.exe windows:4 windows x86 arch:x86

b5581b3b6150521ce2011d1b4a907db9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
GetTickCount
EnumResourceTypesA
DeleteCriticalSection
TlsGetValue
LoadLibraryExA
FreeConsole
GetDiskFreeSpaceExW
GetCommandLineA
IsBadReadPtr
ReleaseMutex
GetDateFormatA
SetLastError
GetDriveTypeA
VirtualProtect
Sleep
IsBadCodePtr
FindClose
CloseHandle

shell32

ShellMessageBoxA
SHFree
SHGetDiskFreeSpaceA
DllUnregisterServer
DuplicateIcon
DragQueryFileA
SHGetMalloc
DragFinish
SHGetSettings
StrChrA
DragAcceptFiles
ShellAboutA
ExtractIconA

printui

PnPInterface
vQueueCreate
vPrinterPropPages
bPrinterSetup
bFolderGetPrinter

advapi32

RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 82KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wqlynxa
Size: - Virtual size: 6KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE