8a1a9b7e967ec7aee0809bfb9850f556 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8a1a9b7e967ec7aee0809bfb9850f556
Size

29KB
MD5

8a1a9b7e967ec7aee0809bfb9850f556
SHA1

6a85e380ef815b77c1f0620b7b89e735f448fbbb
SHA256

6de111d41a19d43be42d8f6fd1f0579889731580f6eb0eeeeeb2413a1b8b27c1
SHA512

b1a102f10a38222d72a72616586fdddf333f382e6ab177b7eff2b33520482d56d24db9de23cc29a7ceae32b07734381b49d7dfe128903fd423ec4432a1c01701
SSDEEP

768:VjTNcwFlcVPK6K4MOMYYwGuwbVNds60+VYisPAye/ZknRHQL:8mlcVtzXYvussVHLPQGnRwL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a1a9b7e967ec7aee0809bfb9850f556

Files

8a1a9b7e967ec7aee0809bfb9850f556
.exe windows:5 windows x86 arch:x86

09945413403bff8a69440ed99a8be325

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
LoadLibraryW
Sleep
SleepEx

Sections

.text
Size: 512B - Virtual size: 51B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tgwrulw
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE