f8e2bf3917c5f1632da86c3b78d454c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f8e2bf3917c5f1632da86c3b78d454c2
Size

58KB
MD5

f8e2bf3917c5f1632da86c3b78d454c2
SHA1

c832cf51a7da3a7e79eb0c3ed28535df33b0d066
SHA256

b793be322b5af038d5bdaf3d935fe39f5879dca4abd5a55d17741be3be50876f
SHA512

01dbe0f85506f2cdcfaaf6f900d9ef56dfa098df8121439d233231681f5938a78aca2deb5c5cb046687c73b792646447c8cfeb4aea75e764c2205890b838bcec
SSDEEP

768:av4ezlDfEYZEK462Fb8F0lvJ5GT7HFnToIf1wUMC9TtS5Nr5ZsA23:Cz6bK88F0lvqHFnToIf9hSPr5Zsf3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8e2bf3917c5f1632da86c3b78d454c2

Files

f8e2bf3917c5f1632da86c3b78d454c2
.exe .vbs windows:4 windows x86 arch:x86 polyglot

cd54f31ef6c24efdc4a37497dac8712f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
WriteFile
SizeofResource
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateFileA
LoadResource
FindResourceA
GetTickCount
GetTempPathA
ResumeThread
CreateProcessA
SetThreadPriority
MoveFileA
SetPriorityClass
GetCurrentProcess
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
lstrcpyA
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
Sleep
CopyFileA
WinExec
GetModuleHandleA
SetFileAttributesA
GetCurrentThread
DeleteFileA
GetStartupInfoA

user32

wsprintfA

advapi32

RegOpenKeyExA
RegCloseKey

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ