0f8d5332115428d4aa336e40e7d811d7 | Triage

Sharing

General

Target

0f8d5332115428d4aa336e40e7d811d7
Size

63KB
MD5

0f8d5332115428d4aa336e40e7d811d7
SHA1

a2f9d9f7d40d3fb8a255358efef8868ce076a17d
SHA256

12e83debd8f521876f07ab0d1deaa000e08264acf34e3f00b1519ff1bec7969c
SHA512

d3f7849143ef653887a099a60cdc336c5571bbe291d674885164aed922c6dd3721fa067d695fe6971626fcbcf17d46a8157122b3b1d9869234bfbadf673bfd1f
SSDEEP

1536:qd0j74gkFUl6fUHrj3dEGU29HDnmvpFis0fzg3E:qi34gc9fUHVc29jnQFis0fkU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f8d5332115428d4aa336e40e7d811d7

Files

0f8d5332115428d4aa336e40e7d811d7
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

14492a37c89cbf229238a617a396c070

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetGeoInfoW
SetCommBreak
GetDriveTypeA
MoveFileWithProgressA
GlobalWire
LZRead
TlsFree
CommConfigDialogW
CreatePipe
LZCreateFileW
TlsFree
WaitForSingleObjectEx
CloseConsoleHandle

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE