08fa654f0684238832e4eff06b612fea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08fa654f0684238832e4eff06b612fea
Size

11KB
MD5

08fa654f0684238832e4eff06b612fea
SHA1

0288bb9e1b71cfb8a950025a864437e4d1f35176
SHA256

ade4773218a43481e9123a0709cdd1cc5bcc3481a822018f7a3726251aad74fa
SHA512

46aa4a300cf958aefd839815cdb3410699e9cfd8a4d29eabd79d8ff2870f10b3338662fdc616bbf12b9816434ebbf90bf01a3dd73b97a0ad7cc5ec8c4a1e5458
SSDEEP

192:UkFV2LGBIr/qdqWy/NV4PZxcSsFVKFBaEQy7FBwv:Ukj6rSMFV4PZN0wHOoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08fa654f0684238832e4eff06b612fea

Files

08fa654f0684238832e4eff06b612fea
.exe windows:5 windows x86 arch:x86

5f4ee840e970df5f38542e5c5b2e198f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UpdateResourceA
FindResourceExW

user32

EnumDisplaySettingsExW
GetKeyNameTextW
GetMenuItemInfoW

gdi32

SetICMProfileA
CreateFontIndirectExA
GetCharABCWidthsA
RemoveFontResourceW

Sections

.rsrc
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 512B - Virtual size: 393B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ