8b81c56c2251b5585cc9c18ee0b16b4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b81c56c2251b5585cc9c18ee0b16b4a
Size

353KB
MD5

8b81c56c2251b5585cc9c18ee0b16b4a
SHA1

a11e2457c82100b9a4f35891e0c8522d6ab9fe79
SHA256

f0024b0d68bb1a4af95993d109822db393e432acb27b420fcd6be767e17bd64f
SHA512

cb3adab06169aa3e32185df16592ef312907d4d9dc83347ea456f48793d192cc2d61c836ca8973e063524205e1d79eb76dedee25601f30ace5d197165d2d4070
SSDEEP

6144:xUVlS5G3esydtntaeq8TDC/rrdN0gOblyu9j0TY1zLwVPZN4gMTU+Q3QsjYJXi:+VlSsNGhjq8QQg4ymjN1z8t49w+2QsUQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b81c56c2251b5585cc9c18ee0b16b4a

Files

8b81c56c2251b5585cc9c18ee0b16b4a
.exe windows:1 windows x86 arch:x86

9a4b1adbd69a0c82d4c562c3545dc194

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItemTextA
GetMessageExtraInfo
IsChild
PostMessageA

kernel32

EnumSystemLanguageGroupsA
GetFileSize
GetProcAddress
GetVersion
LoadLibraryA
SetCurrentDirectoryA
VirtualAlloc
WriteFile

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 22KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE