8937c9db63547254a92102bdf0b8283f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8937c9db63547254a92102bdf0b8283f
Size

46KB
MD5

8937c9db63547254a92102bdf0b8283f
SHA1

01621465ab63ef498782ac98dfd6499cb6b43db1
SHA256

5c0bd4db434bcbbbbd69239ec3ed0caf1c73ab154815472214f4e2797bfe3c44
SHA512

0dda2afe09ba9cc9cadf777ad07bc69ab8179f5a7f6a0a9020e5da3d0796b7fe6e4c80a15ed6d984442d595cfce3990a850da4ff84125e0b4f9157acda825747
SSDEEP

768:BfQ5D0G173TlAL5WN/SvY4MF0E3Yv7KyAHRoSKfNhrFM6wHcf5LZGjG5hl7gfqfr:h80r5wSw4MFYG5HLAxKHA9nHxgSfg0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8937c9db63547254a92102bdf0b8283f

Files

8937c9db63547254a92102bdf0b8283f
.exe windows:5 windows x86 arch:x86

2b740dc93b30a8c3cdc2dbc28d28b325

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DuplicateTokenEx
CryptReleaseContext
CryptCreateHash
RegDeleteValueA
RegQueryValueExA
RegCloseKey
CryptGetHashParam
RegSetValueExA

shlwapi

wnsprintfA
PathMatchSpecW
PathRemoveFileSpecW
PathFileExistsW
StrCmpNIW
wnsprintfW
SHDeleteKeyA
PathCombineW
StrCmpNIA
StrStrW
wvnsprintfA
wvnsprintfW

Sections

.hob
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ijatmb
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nwbul
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ