8d81ee748a32048ac5d09680742e8d70 | Triage

Sharing

General

Target

8d81ee748a32048ac5d09680742e8d70
Size

168KB
MD5

8d81ee748a32048ac5d09680742e8d70
SHA1

bfed8def5880c94251fd8cb43e45a5011bc54f4b
SHA256

97028cb3c231355edac3f2aefd1b0c4445a8a9473f31be9c6bf87fa43ab24fed
SHA512

639408bf32fd0e23dfad811543001b014efbf5c269d11d73f07c8a2905507062a77d0ab1a454e6b86ce47b608ab970e206eeb40d4fec7fe5e2fca5f035b78963
SSDEEP

3072:DHrHofPOlj9sYJbLMEviYivZNnxSKjHhHA0A49dXjOaPQPPIihnXLhtO:PH2GN9VJbLpijxzHq0AujOVPhXLhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d81ee748a32048ac5d09680742e8d70

Files

8d81ee748a32048ac5d09680742e8d70
.exe windows:4 windows x86 arch:x86

c71a46c4679cd1839d661fb1b00c27ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
LoadLibraryA
LCMapStringA
GetCurrentProcess
CloseHandle

user32

CreateWindowExA
wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow

advapi32

RegQueryValueA
RegSetValueA
RegEnumValueA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA

Sections

.text
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ