8b00fd0a5448c9d6503db3aa0ecbe126 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b00fd0a5448c9d6503db3aa0ecbe126
Size

311KB
MD5

8b00fd0a5448c9d6503db3aa0ecbe126
SHA1

c06857741a3755f21992ab444be32ece85957a5d
SHA256

cfe518e90c44353428f96f2db812a7e8dfa5a916580aa37275e7b38eac596739
SHA512

f824ffc82ecf7961efded720606f3177c6fa77cf3fdc3613c1a2006302ed74e402d9360d14d471bf2f42791037f901c2d0d8f370b9b7737b162b1bdcf8ff2b8a
SSDEEP

6144:Od+NsHYcfGkNdCEW/gh95Re3YIAR6y0SROGN+4PrVAuJq:Od+uH3fGoCEW/49zwdGI4PrVAQq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b00fd0a5448c9d6503db3aa0ecbe126

Files

8b00fd0a5448c9d6503db3aa0ecbe126
.exe windows:4 windows x86 arch:x86

43e298eabcfe2a46f024e92f20724361

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime
GlobalAddAtomA
SetConsoleOutputCP
LockResource
CloseHandle
GetACP
GlobalDeleteAtom
SetErrorMode
EnterCriticalSection
GetStdHandle
RaiseException
InterlockedExchange
Sleep
HeapCreate
VirtualProtect
GlobalFree
GetDriveTypeA
IsBadReadPtr
GetLastError
LoadLibraryExA
GetLocaleInfoA

user32

ValidateRect
EndPaint
DrawEdge
GetParent
GetActiveWindow
GetWindowTextA
GetWindow
GetMenuItemInfoA
GetCursorPos
GetFocus
wsprintfA
GetClassNameA
BeginPaint
ReleaseDC
IsIconic
DrawTextA
ShowWindow
SetForegroundWindow
ClipCursor

httpapi

HttpTerminate
HttpAddUrl
HttpRemoveUrl
HttpCreateHttpHandle
HttpInitialize

msutb

GetPopupTipbar

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ