08b9086394039e582a5bc0ef7f16aab7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08b9086394039e582a5bc0ef7f16aab7
Size

111KB
MD5

08b9086394039e582a5bc0ef7f16aab7
SHA1

d4a68a3013aa75fcd943e2f42905f3e9eb42d468
SHA256

ad024c8652667e5194af11108f0cc91bfc8581f580b8e3c4b3d2d9a0c589f083
SHA512

cf581e7c2268a6f4f7c05ec15adc53157c4ab95c89d35f36a42301397fed508f733ad036552e25113c35ed49aec982c502bfaa2a1dedbe5945f4fdaff819ec0f
SSDEEP

3072:KzDkAQ/KBGVYsw3Hml1oix7IlaJwQCU0fOJE6gSrkz:8PQ/4GVYsw5GwC00E6vkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b9086394039e582a5bc0ef7f16aab7

Files

08b9086394039e582a5bc0ef7f16aab7
.exe windows:4 windows x86 arch:x86

6bf72aceebe8cba515ce668416085b39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lclose
VirtualLock
WriteConsoleA

user32

GetDC
GetKeyboardState
GetListBoxInfo
GetMenuInfo

Sections

.text
Size: 73KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE