08e976029d57ef666c978b70f975ceec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08e976029d57ef666c978b70f975ceec
Size

68KB
MD5

08e976029d57ef666c978b70f975ceec
SHA1

8430abfaa2a18191edb56568aaeed62f6607e387
SHA256

f85da9cd6cdb4648b879d6c6e4a2f1b68a8cd7f78969c950d36a4d98d9dcaa65
SHA512

3c0edc8d2e1e1a9c4e0e7dc62bad6d017f42db1fe1b84dd68f22aafa3ee2f97058caa65e28a2e2cad824cdc074694adc37603876b30da63bbeae74cac171fd3a
SSDEEP

1536:bXghssYS+u6FaMJXctgZKYTtkLHTsct9XquZ779oQYX:7BtJFgSwItkLzft9XrroQYX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08e976029d57ef666c978b70f975ceec

Files

08e976029d57ef666c978b70f975ceec
.exe windows:5 windows x86 arch:x86

5aba276ff4a41e01a8a040c7f3edb10c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
Sleep
GetTickCount
GetCommandLineA
ExitProcess
GetModuleHandleA
FormatMessageA
GetLastError
GetVersion
GetSystemTimeAsFileTime
DnsHostnameToComputerNameW
LocalFlags
ReadConsoleInputA
FindNextFileA

msvcrt

fprintf
_ltow
wcsncat
realloc
tolower
wcsrchr
wcschr
wcsstr
_except_handler3
rand
qsort
fclose
ftell
_splitpath
_beginthreadex
_wcsicmp

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ