8d836fc62b5ba2fc8c6af0b295958750 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d836fc62b5ba2fc8c6af0b295958750
Size

3KB
MD5

8d836fc62b5ba2fc8c6af0b295958750
SHA1

71448d13572b5c21d0a0c77251b07a3bce961bc4
SHA256

e9ffe3e3e65017d0af2a53fa5c93efda06202209693d0bc64cfcc5d6b8f34233
SHA512

5a10f295b90343d70d2956a23f79ecec63e3b933143156f07cc646b875e8f5adde51706e5f59b597c948cbf9d5644444f01ad93b475faa2d03f22e7f85f2fe16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d836fc62b5ba2fc8c6af0b295958750

Files

8d836fc62b5ba2fc8c6af0b295958750
.exe windows:4 windows x86 arch:x86

e2a8247c56355931966c81222283ce51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
GetDriveTypeA
GetFileSize
RtlZeroMemory
Sleep
lstrcatA
lstrcpyA
lstrlenA

Sections

.text
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE