8bca162614fa0db06af1a40e5929dfab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bca162614fa0db06af1a40e5929dfab
Size

3.6MB
MD5

8bca162614fa0db06af1a40e5929dfab
SHA1

485ee8a9fe56b3c39ae5d1172d7f5dcac41420c0
SHA256

f2c1ef96cf7e6b9e26cb546df69232d06ddaf863430424dc2432d5db09b4f313
SHA512

84de78cbb88430ae05bd946655d032afd47df9bf2b1b603fe7a4b3c258bda2bbcdde170868c171a03ec38181cb8882c1a238372bb21101a19b0da0bdcc6d4c0e
SSDEEP

98304:PgkJOIR+kMmXsEkWuOig8heUNK/xOIXpt1CPwDv3uFFk:PNwmlkfmOKt1CPwDv3uFFk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bca162614fa0db06af1a40e5929dfab

Files

8bca162614fa0db06af1a40e5929dfab
.exe windows:4 windows x86 arch:x86

65b6862e9898b195f4ef7a1685fd82dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

memset

comctl32

InitCommonControls

user32

MessageBoxA

shell32

ShellExecuteExA

ole32

CoInitialize

Sections

.
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE