8d6f2f489e679bdffc5e72131341c2b2 | Triage

Sharing

General

Target

8d6f2f489e679bdffc5e72131341c2b2
Size

458KB
MD5

8d6f2f489e679bdffc5e72131341c2b2
SHA1

60b03450e7522d86e3e24b3ee19a7be7c240c78a
SHA256

64d220863b895854f3392c69ca4452fdb49a57b2857a31c670bd45244a80b0d3
SHA512

0dee7e1a13f7ab9eb04314508af07984ab9d55df384c0fc5dfa1a9020e44ab387617b766f7a9d52a24ad36dd9d97c9cb4b33368de22aa0fff4363b46ce3e3f1b
SSDEEP

12288:ILBntY1sMeFj3qI0cKNXm10y4stKXHvuExr6GhooWlcNX5:4nCY3qI0f00yIPuaOUpW+3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d6f2f489e679bdffc5e72131341c2b2

Files

8d6f2f489e679bdffc5e72131341c2b2
.exe windows:5 windows x86 arch:x86

f2bb66bf8a9cf364de3b528832229a17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptHashData
DuplicateTokenEx
GetUserNameW
RegEnumKeyExA
RegSetValueExA

shlwapi

PathFileExistsW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA

user32

DispatchMessageA
DrawIcon
GetKeyboardState
GetWindowTextA
GetWindowThreadProcessId
LoadCursorA
MsgWaitForMultipleObjects
OpenWindowStationA
PeekMessageA
SetMenuItemInfoW
SetThreadDesktop

Sections

.ybmnid
Size: 45KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.erozwb
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rwzux
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ