8b8b789a0695b1adc19dbf25572eb543 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b8b789a0695b1adc19dbf25572eb543
Size

279KB
MD5

8b8b789a0695b1adc19dbf25572eb543
SHA1

789c332df3b72520bbfe9c06b180959f5a387637
SHA256

62b62d5c28e4e7d159254c17972c54a321fb9274db1adac85c64136e4a27fa48
SHA512

4b4092bbb99ed689851fff151b62ea4d519c600716bae981f61a479a264a92d3910bdceec3218217cfe7d60bb12523ea68b01f3a87c863ae41f25690ecbdd613
SSDEEP

6144:UxX3rNtttcfUnx89dl9uSE14Vlr7zjQ350nxfahYvzwyTcdSlEW:073t68ne9druf4VlcmnEhr6mSC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b8b789a0695b1adc19dbf25572eb543

Files

8b8b789a0695b1adc19dbf25572eb543
.exe windows:4 windows x86 arch:x86

f251e63905aa3e04357a3755ce380175

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CoTaskMemFree

comctl32

_TrackMouseEvent

winmm

waveOutWrite

Sections

.text
Size: 256KB - Virtual size: 764KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE