8a20bd6e7bed1e3cf9193118dedfc739 | Triage

Sharing

General

Target

8a20bd6e7bed1e3cf9193118dedfc739
Size

93KB
MD5

8a20bd6e7bed1e3cf9193118dedfc739
SHA1

ee79a83e508ba8e79cb56bec762fd030854da984
SHA256

e3a025e81fd7ae195ba7586a0fd4ae82b6842fd80f2f2d2dabb3ec7cf8300d60
SHA512

0645db809ff1a00075f2582501983ec6031c6bedc15e0726a8231e578d8a77aa7c2a8ccd8befc22a6d799aab023ddb4a4f53eed478d89226d8c69c288d582cb3
SSDEEP

1536:rmPIcSnHJeSlEaivYtWklNs6hDSDyyKw2ZbjFDuPBNg+uYvb0xlCsofGHb8dctVI:rmAcSJ1lOY8uNsI7NXlYDmMso2ZtVyCu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a20bd6e7bed1e3cf9193118dedfc739

Files

8a20bd6e7bed1e3cf9193118dedfc739
.exe windows:4 windows x86 arch:x86

baca414d331d1a694871e3bc5d0a6582

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
DefDlgProcA
CreatePopupMenu
CreateMDIWindowA
CreateAcceleratorTableA
CharUpperBuffA
CharToOemBuffA
CharPrevA
CharNextA

kernel32

GetFileSize
lstrlenA
lstrcpynA
lstrcatA
VirtualFree
VirtualAlloc
TlsGetValue
TlsFree
SetLastError
RaiseException
CloseHandle
EnterCriticalSection
EnumResourceNamesA
ExitProcess
ExitThread
FindResourceA
GetDateFormatA
GetLocalTime
GetStartupInfoA
GetSystemTimeAsFileTime
GetVersion
GetVersionExA
InitializeCriticalSection
MapViewOfFile

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE