8bafc04429c916a8dddaa69ef8a6d88b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bafc04429c916a8dddaa69ef8a6d88b
Size

457KB
MD5

8bafc04429c916a8dddaa69ef8a6d88b
SHA1

66b34c8d411d6c2d5050b5c7b42473b5156a932a
SHA256

2bbba5c2b552431aaecc5053b1cb58fb35edb699b6a101e90109a473cd234e38
SHA512

eb5a8c9b12b9e2cd9519e88ad5e247fbcf63dc883526698061b97695bf6462c18a423ebf57a16e4022295a657e2a4d75fe76632ab8da2d85679dbdbeb8825335
SSDEEP

6144:fYhtV2SQjfg8p7o9dip5UbahXG4JKhvX4aGwIYCrrTo+KJ/YicA499SoBC2jRwmb:Qyj4/H34JKhvEBXJ475oAL5ypxEuK7M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bafc04429c916a8dddaa69ef8a6d88b

Files

8bafc04429c916a8dddaa69ef8a6d88b
.exe windows:5 windows x86 arch:x86

481cf877a2ddc943262ae0df41be797e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA

kernel32

VirtualFree
LoadLibraryA
GetModuleHandleA
SetErrorMode
VirtualAlloc
GetProcAddress

user32

MessageBoxA

gdi32

CreateFontA

advapi32

RegCloseKey

oleaut32

SysFreeString

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 453KB - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ