8afda70574b00a693fc4f34d23abd0b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8afda70574b00a693fc4f34d23abd0b7
Size

17KB
MD5

8afda70574b00a693fc4f34d23abd0b7
SHA1

f4891367a037b923ae6a6ddf2b353eee7f5551dd
SHA256

eb8e58cf34238efaea7c7fa672809060cfb13a78de2de27b9364956d267a6807
SHA512

4f73657954267e9ea61442a8ba865a28637bfee71cef092cecc24f6b5014e8914bb1080d51236754e81cba483f26b9f603664134df0914cce4e5aea0750711d4
SSDEEP

384:xFFBoYGtcmZO2Zp+Nye8pqrmub8TyztsDN:x/rGtoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8afda70574b00a693fc4f34d23abd0b7

Files

8afda70574b00a693fc4f34d23abd0b7
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE