8a3fb38e4e1686ea7f71ca90b6fa2992 | Triage

Sharing

General

Target

8a3fb38e4e1686ea7f71ca90b6fa2992
Size

77KB
MD5

8a3fb38e4e1686ea7f71ca90b6fa2992
SHA1

4ea3a81444edc9ad396300f0bf226bc9ce4e38b4
SHA256

86e2cf5d4dbb115b59b0d479013afb3e25501241c036084cddc47de6a78be668
SHA512

f7881c21487e8b8fcef136f112901ea3fbf98eca6cc6cb9eb3f3f6d12b739e61d8f4d543ef8c9fb4aa5aff4c6174e141238b28e971ce7a32bbd1d0fb453723e0
SSDEEP

1536:K8bq1gIvyqaGDN6q8m8/LBR1LtTitMRx1Mo46TyNUgPM34yLaiH0FYz:F8gh+DN6NmwLBRJ86dfvg0riY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a3fb38e4e1686ea7f71ca90b6fa2992

Files

8a3fb38e4e1686ea7f71ca90b6fa2992
.exe windows:4 windows x86 arch:x86

1b51904180dbc4099bf824bcb96f9155

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GopherFindFirstFileA
GopherOpenFileW
FtpGetFileW
FreeUrlCacheSpaceA
HttpQueryInfoA

user32

DrawIcon
DestroyCaret
FillRect
GetActiveWindow
GetMonitorInfoW
GetShellWindow

advapi32

ReportEventW
RegFlushKey
DecryptFileW
ReadEventLogW
OpenThreadToken

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE