f8fc2942b957366b4f05e78ada108b1e | Triage

Sharing

General

Target

f8fc2942b957366b4f05e78ada108b1e
Size

46KB
MD5

f8fc2942b957366b4f05e78ada108b1e
SHA1

aa9b036eac975e643943a8125d9f8fcb2dacd8af
SHA256

84ccb1d5005a84740daf98ad6941c25c20cecd3e24e90b04b2404bea6596db6d
SHA512

7417676f27a8f8827f212d6c7abbf38ad3bc2a221cc77d5a221bb934a7b991a6ad6632a78dd5d4ba4018a93f6846f18330af2179bb6ff24aefb8017ade5bd5c1
SSDEEP

768:B+YWr9amoV/UVSpHEkHfILsR02fM4dhQy:B+pRaZMVSfffM4dhQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f8fc2942b957366b4f05e78ada108b1e

Files

f8fc2942b957366b4f05e78ada108b1e
.exe windows:5 windows x86 arch:x86

148e0e4f5a656e5e52d5fb0a354d70df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
WideCharToMultiByte
SetEndOfFile
DeleteFileW
FindClose
LocalReAlloc
GetFileInformationByHandle
GetProcessHeap
HeapAlloc
HeapFree
GetUserDefaultUILanguage
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetModuleHandleA
GetStartupInfoA
CreateFileA
lstrcatA
GetEnvironmentVariableA
HeapSetInformation
TerminateProcess
GetACP
GetSystemTimeAsFileTime

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ