8b593d011474aed815796c3943583768 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b593d011474aed815796c3943583768
Size

72KB
MD5

8b593d011474aed815796c3943583768
SHA1

6788e81a36b59a2f24bdc5f70c81f22c07ba210a
SHA256

eb0701816e35347869d7194726e410fc16317ff64875fc6c1ffe1c449ad70f05
SHA512

785a477c5228203af723082f6798fcaebb8945864f20343dda6b819f36bd0b5cc7d745e88dea48d81c4e3401b1e5534b8d220fa44f400243a49843198c7a9349
SSDEEP

1536:EAY36dLkjpBH/BTyJ+R1c+3Q3z1bVzBNCYMPX1xl0SSQiJzSF:tYKpoBfFywLi1bVDItrFHF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b593d011474aed815796c3943583768

Files

8b593d011474aed815796c3943583768
.dll windows:4 windows x86 arch:x86

ca0285ff19034c98eca8e2d51b9c358c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
GetCommandLineA
GetModuleHandleA
GetVersionExA
HeapAlloc
HeapCreate
IsValidCodePage
SetConsoleCtrlHandler

advapi32

QueryRecoveryAgentsOnEncryptedFile
GetEventLogInformation

setupapi

SetupDiGetClassImageListExW
SetupRemoveFromSourceListW
SetupSetDirectoryIdA

user32

SendMessageTimeoutW

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ