08fa397ab3e1118244802d45063e13d6[.]exe

General

Target

08fa397ab3e1118244802d45063e13d6.exe
Size

286KB
MD5

08fa397ab3e1118244802d45063e13d6
SHA1

33e1848b120c97b84d5e0f9b5aca44554b4f615b
SHA256

e0b94bf495c6ac2fe93bf55c254c1dd1034764bceaf42a225cc98a645f0aa0e7
SHA512

3d839557bb37c446a6da9b82b497c88c3e8db2a384ae63751e3c87ec4c46aafa4754822406893e79f306f24a2618426135c616a2159bd7f78f4ef7a92db7c09c
SSDEEP

6144:IjrYx6sMRDXy1EoGwU9PWGvdx6S/ndLiUX+afjOti29OEAqAYJkwDssNx:IfYIRuUxJvdcyLi++aOtZMxkLDsC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08fa397ab3e1118244802d45063e13d6.exe

Files

08fa397ab3e1118244802d45063e13d6.exe
.exe windows:4 windows x86 arch:x86

2c56702c3f3efc9a7a56de4ba4e0dbe1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

ShellExecuteA
Shell_NotifyIconA

kernel32

LoadLibraryW
ReleaseMutex
GlobalFindAtomW
GetCurrentDirectoryW
FreeLibrary
GetSystemInfo
CopyFileW
GetModuleHandleA
GetModuleHandleW
WaitForSingleObject
LocalFree
GetPrivateProfileStringW
HeapFree
GetCurrentProcessId
GetProcessHeap
LoadLibraryExA
EnumResourceLanguagesA
GetWindowsDirectoryA
lstrcmpiW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetProcAddress
lstrlenA
ExpandEnvironmentStringsW
CreateMutexW
FormatMessageW
FindFirstFileW
SetFileAttributesW
LoadLibraryExW
HeapAlloc
FindClose
GetSystemDirectoryW
FindNextFileW
GetCurrentProcess

rpcrt4

UuidCreate

shlwapi

GetAcceptLanguagesA
PathAppendW
PathIsRelativeW
PathFindExtensionW
UrlUnescapeW
PathRemoveFileSpecW
PathCreateFromUrlW
UrlCreateFromPathW
StrCmpIW
PathCombineW

Sections

.text
Size: 146KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c56702c3f3efc9a7a56de4ba4e0dbe1

Headers

File Characteristics

Imports

shell32

kernel32

rpcrt4

shlwapi

Sections

.text Size: 146KB - Virtual size: 273KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 136KB - Virtual size: 136KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 146KB - Virtual size: 273KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 136KB - Virtual size: 136KB

.rsrc
Size: 1024B - Virtual size: 4KB