8b1d5fa928071ea45a953c2c54c308d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b1d5fa928071ea45a953c2c54c308d6
Size

19KB
MD5

8b1d5fa928071ea45a953c2c54c308d6
SHA1

948464d613807572af17863b5a2cbd3751cedb2a
SHA256

a3494fa1b69c946d5587a39873fc6a84fb4ca76d123513ee5e95550d54175740
SHA512

0e60b1bfd0d4a948bf9ee6deb5dbc6ea2bdf38c2d389554170052cc3c6d9b23c5be59fa8cca5f245c5ca8e4938c16b3f3936a315a731976fe28bb1d96cf8f04b
SSDEEP

384:C3sLWwVOBN2xjDHbqKtc4y2DVKtZul0szto:KaWw0BNMpc4y2Dotkl0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b1d5fa928071ea45a953c2c54c308d6

Files

8b1d5fa928071ea45a953c2c54c308d6
.exe windows:4 windows x86 arch:x86

72bbf32117ebee41a516820e547608ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
GetProcessHeap
CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
FreeLibrary
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
CloseHandle
lstrcpyA
lstrlenA
SetFilePointer
SetFileAttributesA
CreateThread
WaitForSingleObject
GetVersionExA
WriteFile
ExitThread
GetTempPathA
ExitProcess
RtlUnwind
CreateFileA

user32

MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
CreateWindowExA
SetThreadDesktop
CreateDesktopA
CharToOemA
EndPaint
wsprintfA
DestroyWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ