8af5e0686c4b27899bf724b0d95b0eed | Triage

Sharing

General

Target

8af5e0686c4b27899bf724b0d95b0eed
Size

59KB
MD5

8af5e0686c4b27899bf724b0d95b0eed
SHA1

f809684f5a47284cfa3c93532a4757f91d29820a
SHA256

f2e59a25ab1755f791be2c71e941adc6bc5d7d7c0e5c1bf6e73c2feb16c83075
SHA512

5b442d7ddb08700757e01836892b4ad514517eea93501404dd88259c989edba35b41075563e0d160fe71cc92bc6ca0f59bc30b4f19a7dcf6da6450d8d4f9e476
SSDEEP

1536:PsfZRSKC6/6tFwJ2Lw99y/1RkSTG9jTvK/otrmqzL2sOhvgr5:UZRZ36X/s99y/1RkSq5boCa5sOhE5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8af5e0686c4b27899bf724b0d95b0eed

Files

8af5e0686c4b27899bf724b0d95b0eed
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE