8bfee2d2d4be4fb91e71859ec2f258f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bfee2d2d4be4fb91e71859ec2f258f8
Size

7KB
MD5

8bfee2d2d4be4fb91e71859ec2f258f8
SHA1

8f8a8d1fa0892b939eb3e0cc5a3da300143f9b34
SHA256

f01869c0263671b1d85dd354ebe7b0e81eedeb1fde7f977c145d88adfc628882
SHA512

34c18d029a6079ae822aa2280650010a7a2f38b8eca8fba893caca6597d5ba1c7052b1941b02d332afb4278cee63ea3f8e75dcf6bc0f61a8541c7d0aac69577f
SSDEEP

96:WC2qALNMkb/F/+QzDQsIlhHzRczbRWCnP4hqepPs:tARMk9XQsIlhNc5rPIqkPs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bfee2d2d4be4fb91e71859ec2f258f8

Files

8bfee2d2d4be4fb91e71859ec2f258f8
.exe windows:4 windows x86 arch:x86

d4418c024c4444ea8cd352468e4d57ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
SetTimer
RegisterClassExA
PostQuitMessage
KillTimer
GetMessageA
FindWindowA
DispatchMessageA
DefWindowProcA
CreateWindowExA
wsprintfA

kernel32

GetModuleFileNameA
ExitProcess
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
WinExec
Process32Next
Process32First
GetModuleHandleA
CloseHandle
CreateFileA
CreateToolhelp32Snapshot
GetCommandLineA

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlA
InternetOpenA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE