8abcaafbdda480f631448e9581a0662d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8abcaafbdda480f631448e9581a0662d
Size

408KB
MD5

8abcaafbdda480f631448e9581a0662d
SHA1

2aa31c94abecbe970b4ab27b243730c674982248
SHA256

32ef3ca4663ffdc449d7a4cedf45dcac69739016e998701ded86ae4505d99dab
SHA512

8daf1894f1b3c2355059f8c8a03633e4dc10e270d9939b984d568cc8026c5047e90bbfe1b0b77d77713d7dba05e00e568a1641fdc8ff6b0190f5009af1448ac1
SSDEEP

6144:0gcNchSAUy+7LsP/w+sVEj9mdkTqKdyzMVa4+rA5ZiecFmwMOVmgfeQZ:0gXhSAUy+7LsHZsmKkkNJFrlm0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8abcaafbdda480f631448e9581a0662d

Files

8abcaafbdda480f631448e9581a0662d
.exe windows:4 windows x86 arch:x86

e19d862dabee8544263091704b01c087

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetWaitableTimer
GetProcAddress
Sleep
GetModuleHandleA
GetLastError
DeleteFileA
InterlockedExchange
OpenEventA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
GetStringTypeW

user32

LoadIconA
LoadImageA
EnableWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ