8bcb7d588e3d4710a4a8b25d93b2ac7a | Triage

Sharing

General

Target

8bcb7d588e3d4710a4a8b25d93b2ac7a
Size

396KB
MD5

8bcb7d588e3d4710a4a8b25d93b2ac7a
SHA1

8e58406caa28136d413b8b013b66591df5e7a079
SHA256

e1a188493e1b6b4a12505c601de76502c9ea2499d0512444d612fe6b9bc56665
SHA512

feeed68f794022e6793a8dc9a575b66b7e54a442a646cc8c6c038df0e30dfed980f0b1738209329edd44b2fcef5433a7244f56c04544c07cbe337f778a8f4f6c
SSDEEP

6144:ZXF6qKsz721G3Fl7UxOwNYpkRujs0d9fqsHqhHmyONtuaCxqE1dNQSQ2:RF6ZCFFUxxNIoujtCsQHmyCns1dQ2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bcb7d588e3d4710a4a8b25d93b2ac7a

Files

8bcb7d588e3d4710a4a8b25d93b2ac7a
.exe windows:4 windows x86 arch:x86

0a96ac58fabc13aecc3d0f05ecf27348

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
WaitForSingleObject
LoadLibraryA
GetProfileStringW
VirtualProtect
CloseHandle
Module32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetStartupInfoA

ole32

CoInitialize
CoTaskMemAlloc
CoRevokeClassObject
CoTaskMemFree

ws2_32

listen
ntohl
inet_addr
select
recv
send
socket
WSAConnect
WSACreateEvent
WSASocketA
WSAGetOverlappedResult
ioctlsocket

msvcrt

malloc
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_controlfp
clock
exit
realloc
free
strstr

Sections

.text
Size: 204KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 344KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ