8b0914cf5abeba40c69dba9107fb9cc6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b0914cf5abeba40c69dba9107fb9cc6
Size

26KB
MD5

8b0914cf5abeba40c69dba9107fb9cc6
SHA1

93b6db994fc5108e605562ed8e1cc38989009676
SHA256

4a5ddf813ab930136d8ed97b2fa3f44510d819143ed470619b7fb5ed6f612cba
SHA512

074fffe66e18c25a06e46f3d7375545c132b23766aeca90895393b4402ed247e4b2a46ba7aac08fcfc49a30ecfc01657623cf5fe3a859ad823dde4bf8af491b5
SSDEEP

768:y7KxMSZLXI6fxHj8AOAkSCuk0aAyE5VQh:yG7ZDVH79ktukQNQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DESK32.EXE

Files

8b0914cf5abeba40c69dba9107fb9cc6
.zip
DESK32.EXE
.exe windows:1 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Exports

Exports

@__lockDebuggerData$qv
@__unlockDebuggerData$qv
__DebuggerHookData
__GetExceptDLLinfo

Sections

CODE
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WALL32EN.RTF
.rtf
WALL32TR.RTF
.rtf