8b687b7c96b9f96223000171cc48c1e1 | Triage

Sharing

General

Target

8b687b7c96b9f96223000171cc48c1e1
Size

6KB
MD5

8b687b7c96b9f96223000171cc48c1e1
SHA1

dafe8a90b1f19c85409eca7e01c41cbb5ba016bb
SHA256

e0da1f43f98079b1d50865f1ff0d49280765d8bf8e33e28de7577f2ccf95917d
SHA512

a98b6dc02f889e3d51cc66fe91b2a5785add6db5b63e7ce79819431cfd4f0b7cf80c4948aee7c389fc70b6e8721fcbfd81ba76bc6302ae593f7fda3f7fe28ea6
SSDEEP

96:YOVBrCt0pi2vNmQ8NgG4CNfDl2K9d0nCCAPOtq6Ti+I0:YufpZv3bCNp2ydchAPMq6A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b687b7c96b9f96223000171cc48c1e1

Files

8b687b7c96b9f96223000171cc48c1e1
.exe windows:5 windows x86 arch:x86

59438f1a704320190877934c6fb780bd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetSystemDirectoryW
Sleep
CopyFileW
GetVersionExW
GetProcAddress
LoadLibraryA
lstrcatW
DeleteFileW
LocalFree
SetFileAttributesW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind

shell32

CommandLineToArgvW

ole32

CoCreateInstance
CoUninitialize
CoInitialize

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1002B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ