802cb4963ddc9377626c1e6a66d863bc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

802cb4963ddc9377626c1e6a66d863bc
Size

21KB
MD5

802cb4963ddc9377626c1e6a66d863bc
SHA1

1590f2042c6c45bf8301eedea7a5635158aa16a3
SHA256

9ea4ebbcba007443cd673ecb1817681355aaf724d94e883f36c8980a1d3578a1
SHA512

22d7fdbe735996ed0e8ee306e469e6de6bf9c7ce69900ecd640eaeb121b60ec3aa8066b77d9108f305d0dfb54699aff2b66721f1f8e1b22965d3b8fcf985c477
SSDEEP

384:AbjHQPpx9icWWhZ2NwiKRYBsppkR3OhQ:AbzQXb+mpqRe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
802cb4963ddc9377626c1e6a66d863bc

Files

802cb4963ddc9377626c1e6a66d863bc
.exe windows:4 windows x86 arch:x86

c494458029910d0ed6df63da0b05bbd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ