8b8bc959410731ba58d966e50a5721ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b8bc959410731ba58d966e50a5721ef
Size

1.9MB
MD5

8b8bc959410731ba58d966e50a5721ef
SHA1

cde59c9eef99fd1fd232ffbf60672c404b0b107b
SHA256

52d51109701e7ddf9b24d052c23390182c84ca2904a3198104019eaa781c53f4
SHA512

0dc90940a60b74f47bdc89c4a7cbd9a50e154a62cc4bc7b76d7ad4f59728cc2bf948621052c59d7296bf28947ea3e26358a62c6cdcd70a9e0e6992d379598a3a
SSDEEP

24576:73lZsE8FE9IFCh8zpbXsYPOQbvlvCCGRPWo/RHF+xRo96rX+iKOOz9B46UvtO5P+:qf08fGqGdRYxQcKDgdvtO9+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b8bc959410731ba58d966e50a5721ef

Files

8b8bc959410731ba58d966e50a5721ef
.exe windows:4 windows x86 arch:x86

cead72389dbd10bd7dc67a52d57552ee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

Sections

CODE
Size: 1.9MB - Virtual size: 13.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE