8b2a118328375a1314b1b9c4d9944d91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b2a118328375a1314b1b9c4d9944d91
Size

51KB
MD5

8b2a118328375a1314b1b9c4d9944d91
SHA1

91e82fb03d8f39233603739f93a2187e9790d16c
SHA256

42d5bd85b1ea722083e6ee0911ce422a92c6973e1e9e9cbd0d3909c661291edf
SHA512

3e1e0d1a32e96b7e6c2b131b269ad2ee01b9bee2fff6745f8bdd63c1f9c96b8e072e07af09bbfc6f8bbe4f4e6c8be3f0b717b385a62d6b7a78d534f7f43658c4
SSDEEP

1536:2CzkauBVJV+NDvMCxYSxPUadMsfHfMhX:vzOJ0FvMCxNxPUadpEhX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b2a118328375a1314b1b9c4d9944d91

Files

8b2a118328375a1314b1b9c4d9944d91
.exe windows:5 windows x86 arch:x86

51abdc6dbfbe52b951dca5deeb338479

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

advapi32

CryptCreateHash
CryptReleaseContext
DuplicateTokenEx
RegCloseKey
RegDeleteValueA
RegQueryValueExA

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

ExitWindowsEx
GetClassNameA
GetForegroundWindow
GetMenuItemID
PeekMessageA
SendMessageA

Sections

.divqz
Size: 42KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dohsf
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ibudyt
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ