08406ae7809d36d5809fa9f22c25aff4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08406ae7809d36d5809fa9f22c25aff4
Size

64KB
MD5

08406ae7809d36d5809fa9f22c25aff4
SHA1

81f87993066e9bb59caff1fb595c5305796938b0
SHA256

ab7c2c60f7a710e05890b92f139792e54a87a3416e6758fd1a7b47fa96b536f3
SHA512

de8cda4fb932312805eccb057d7dd79e55cbf5ec31ea0e09509ef770b91bf26a6f2933b27b7a65aa6e6e23c28318fcbfc0b080ec06f9a87de058c2c9b09b555a
SSDEEP

768:l8e955jKz9qF7vqQckdK5WWNXh9CxPXxiFOeZO6:ie94cFTkkIkKXDAxiweZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08406ae7809d36d5809fa9f22c25aff4

Files

08406ae7809d36d5809fa9f22c25aff4
.exe windows:4 windows x86 arch:x86

4082a31941a639d32160559ee032d374

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
CreateFileA
CloseHandle
GetModuleHandleA
DeleteFileA
SetFileAttributesA
GetCurrentProcess
GetSystemInfo
GetLastError
LoadLibraryA
GetProcAddress
SizeofResource
GetStartupInfoA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteValueA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerOpen
mixerGetLineInfoA
mixerGetLineControlsA
mixerGetControlDetailsA
mixerSetControlDetails
mixerClose

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ