8b21fcbc39b6c94dfba0c5b2446fb384 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b21fcbc39b6c94dfba0c5b2446fb384
Size

2.0MB
MD5

8b21fcbc39b6c94dfba0c5b2446fb384
SHA1

9001485c3d12b7a81b9cd1baf30bd222e876d65e
SHA256

a70f1f18b59585d8c48ef95601e3d1c707fc777a3598f7057a886739cba54dc5
SHA512

453b2168c325a6a53aee536e8be13a7e6591378fd1a1cf3d1777531f0b95639875520badc1a7309906fed2c66b358d194b943d48a795dc799badfbfe60329533
SSDEEP

49152:PbeE9nDHLxW1KwnMk2xLhhM0WXm13V/CNRiac:jblY2xLhzPF/Crc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b21fcbc39b6c94dfba0c5b2446fb384

Files

8b21fcbc39b6c94dfba0c5b2446fb384
.exe windows:4 windows

2eabe9054cad5152567f0699947a2c5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

Sections

Size: 16KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kegovxqy
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qaghqmle
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE