8b1ccf8b22a73c6cc7a97a63c3f7df9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b1ccf8b22a73c6cc7a97a63c3f7df9a
Size

293KB
MD5

8b1ccf8b22a73c6cc7a97a63c3f7df9a
SHA1

a83407b9bc019cc237b042b8e8a9e891587bdeb8
SHA256

9675cbbc65284b8c716ff6b0e8142d717d3db26e5fa2cbbe9f30a97568d2e32d
SHA512

fb15032e10346d0341d9ecce8f744dc951eb4ee18c20b9e9b469f2400b81008804150b8b5cbc7ddea75306b38bc41c1eda75c4fbcfc10044401d5a96c3a17ad0
SSDEEP

6144:dCPaHbYZiQwr0iaR4Qc6Hu+Fcc6HcT66vlmRmkdAqEr3eN7nt72ccc3kc3Jc3eOn:dWUbYgQaqRtFVV3eNypL/BR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b1ccf8b22a73c6cc7a97a63c3f7df9a

Files

8b1ccf8b22a73c6cc7a97a63c3f7df9a
.exe windows:4 windows x86 arch:x86

3a73f17b721205fda3653940f273419f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
InterlockedIncrement
ReleaseMutex
CreateMutexA
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject

msvcrt

_write
_fileno
_fstat
_isatty
_itoa
_lseek
_open
_read
_close
_assert
_cexit
_errno
_fileno
_fmode
_fpreset
_HUGE
_iob
_setmode
__getmainargs
abort
atexit
exit
fclose
fflush
fprintf
fread
free
fseek
fwrite
getc
isspace
isupper
__p__environ
malloc
memchr
memcmp
memcpy
memmove
memset
signal
strcmp
strlen
strtol
strtoul
system
__set_app_type

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE