8b640858877e10826709930ee6811c65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b640858877e10826709930ee6811c65
Size

340KB
MD5

8b640858877e10826709930ee6811c65
SHA1

384c7e220bf7857d8c2b79d18e00ee31813f063c
SHA256

d006c9da638c972091384cf296036314137297702f18eeda287e7bd62701cc44
SHA512

f873735ac9e764f6f45a7b41d35304453507220fed0dc4db9efc8c89819bbd029cd41c38bc1a9fd969ea80f2376a53f1d391255cc00f22aeda59cb4555a8c26c
SSDEEP

6144:CzXVjKOTCghzfownJMoI8m8RcfTc9MAQi3xtQE8Gf/s:KXxK8zfownWOm8RKiSWxFf/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b640858877e10826709930ee6811c65

Files

8b640858877e10826709930ee6811c65
.dll windows:4 windows x86 arch:x86

5380a472f5b225eccd6f84ff4f5418a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsValidLocale
GetThreadLocale
GetCurrentThreadId
GetExitCodeThread
DeleteAtom
CreateFileW
SetFilePointer
WriteFile
ReadFile
HeapAlloc
GetProcessHeap
HeapFree
DeleteFileW
GetTickCount

ole32

OleUninitialize

winmm

timeKillEvent

shlwapi

SHDeleteKeyA

user32

wsprintfA

advapi32

RegCloseKey

msvcrt

malloc
free

netapi32

NetApiBufferFree

version

GetFileVersionInfoA

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ