8051cb97a428701587be3fabf58daf7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8051cb97a428701587be3fabf58daf7d
Size

100KB
MD5

8051cb97a428701587be3fabf58daf7d
SHA1

9ed1e7a67f76c53525d90a70cdb6856b6c402ce7
SHA256

5960699c83cce97a5deb56b197fa4554f9f023aaf8ef3f612c8f402e82c134d0
SHA512

9282245ec12e9e9a644214855e6be996efea508e65b4034dde734a099fe2e17125e3e2aa11701d664000801294c8f3597a78590338a9507b6bc44c4dd6118373
SSDEEP

1536:0NcEDWFVTbSdna6jq6+qvwNuYNFToHiJuovTk3w1MhA/vcas8Xh6e4mh:Gc8A3D6EqvwNNaiJFrk3QM6/vcR1E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8051cb97a428701587be3fabf58daf7d

Files

8051cb97a428701587be3fabf58daf7d
.exe windows:4 windows x86 arch:x86

875c8f53ea819265cf33e52506878f94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawMenuBar
GetParent
GetMenu
GetActiveWindow
GetPropA
GetTopWindow
GetScrollInfo
GetMessagePos

shell32

SHFileOperationA
Shell_NotifyIconA
SHGetFolderPathA

kernel32

SetThreadLocale
GetModuleHandleA
SetLastError
VirtualAllocEx
ExitProcess
LocalAlloc
LoadLibraryA
SizeofResource

advapi32

RegEnumKeyExA
RegQueryValueExA

Exports

Exports

_qdRwQRPRF
_Q4fkZcbBWd4n@24
MdPI_PQyak7fSC

Sections

CODE
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ