f8c9771dce70eb7eabe2ed44d8fc68b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8c9771dce70eb7eabe2ed44d8fc68b3
Size

220KB
MD5

f8c9771dce70eb7eabe2ed44d8fc68b3
SHA1

6d16f80b3401b02d68b5f31c7050992583ae7477
SHA256

e16cc95edfc1cc34f6f33974f6282655a63ccd3b067a61f2da06e48721a1e059
SHA512

96be9bcde34adb1df65aa05b50767733e436e9c1be46f5fab2e9d29015c1d4dcb52c51f8091e5c5772a423346c1cf34797d6e7c5ceef24baf8a536fd63d7a57a
SSDEEP

3072:OBQQQba6KiVf66uVjzXEqcup1/9V7ePEnZxbmXuMqlOD:La6Lcj7t9ZZxbmXuMn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8c9771dce70eb7eabe2ed44d8fc68b3

Files

f8c9771dce70eb7eabe2ed44d8fc68b3
.exe windows:4 windows x86 arch:x86

9a1232f977bd8e4c31fcd759909ab262

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc
ExitProcess
GetACP
GetCommandLineA
FreeResource

user32

GetDCEx
GetDC
CharUpperA
LoadCursorA
GetCursor
GetDesktopWindow
GetMenu

Exports

Exports

ze@24

Sections

CODE
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eddata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ