08ca8d5e278108dcd9e037f408454ccb | Triage

Sharing

General

Target

08ca8d5e278108dcd9e037f408454ccb
Size

10KB
MD5

08ca8d5e278108dcd9e037f408454ccb
SHA1

835f55a9ac47f8784ae1e162feca73faacc3ab1f
SHA256

9d9307b6134da313afe5cc715a5f30d0d622a384549622458de73a14e240b775
SHA512

96a109caf21a56cdeb77ac65ccdaa48ddb0f828dbc6665a0a8399d9932b34c8a575f880840ca21792875953a999c7880a904f4b03238354635fcceb48ffcb9e3
SSDEEP

192:tlS7L41yC1aBTFP4HI65e7gqPpAQbj8AL4AL/+fJt+a7:tlSf2o6+gMpAIj8AL4Aja

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08ca8d5e278108dcd9e037f408454ccb

Files

08ca8d5e278108dcd9e037f408454ccb
.exe windows:4 windows x86 arch:x86

6e74a36d6bb13b778b943e66a2769710

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
HeapReAlloc
GetFileSize
SetCurrentDirectoryA
WaitForSingleObject
GetCurrentThread
GetTickCount
CreateThread
HeapAlloc
GetProcessHeap
HeapFree

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE