080f3efff894ae68b9842e316f77b717 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

080f3efff894ae68b9842e316f77b717
Size

16KB
MD5

080f3efff894ae68b9842e316f77b717
SHA1

77337dd5e084f89b388cb86892aad1698027426a
SHA256

525a313619356e2307fbcda9b1c461ebae6fb3a231f72e261ce20318d4a055e3
SHA512

192b120b707c8ba88711b07fe5106044d0f980ddb58756c4ce9178733b1e7da19a8403a0d9b1d8f024beb8f428bc1191b4c65d3067e14ad60cc42c96eb3dfeb0
SSDEEP

96:thjE1KR7J6vRYe8Xta/iUzMe7ROvCECrlYnBHrP4oynVkLWM/A:vp1toiUoe7ROMlYBHrP4oynVMo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
080f3efff894ae68b9842e316f77b717

Files

080f3efff894ae68b9842e316f77b717
.exe windows:4 windows x86 arch:x86

9ae7e3e82b405dc00ddeec0b0d563e26

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
GetCurrentProcess
TerminateProcess
OpenProcess
GetCurrentProcessId
ResumeThread
GetTempPathA
SetPriorityClass
CreateProcessA
GetShortPathNameA
GetEnvironmentVariableA
GetModuleFileNameA
CreateFileA
GlobalAlloc
SetFilePointer
ReadFile
WriteFile
SetFileAttributesA
CloseHandle

advapi32

RegDeleteKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA

shell32

ShellExecuteExA

msvcrt

__p__commode
printf
sprintf
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_stricmp
__p__fmode
__set_app_type
_except_handler3
_controlfp

psapi

GetModuleBaseNameA
EnumProcessModules
EnumProcesses

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE