8c62f203f78759de32aa5f3d4e474a39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c62f203f78759de32aa5f3d4e474a39
Size

24KB
MD5

8c62f203f78759de32aa5f3d4e474a39
SHA1

50df6b3a1d8404ca9f2e16d1c99f80dd49a7bb26
SHA256

73e9ea0299ac7ee2320f623a424250012d2efb764fc71d85348f3c565b6b812e
SHA512

c54882bbdf59e36b6556cefc4374a1664e2a25c4fb270b478154f59642f12a84617094d6ceface41fdb64c8cc9b55b62e4e3e237694bc378163934f0e7d524de
SSDEEP

192:LzlkJYuRA6yoBFcvurNe/pyf/itq2UmUZE6/Npg2ei9pQOLDR8DbxuEP1oyn:8RZiWRe/cf/eq2xUcTicOLDIbUq1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c62f203f78759de32aa5f3d4e474a39

Files

8c62f203f78759de32aa5f3d4e474a39
.exe windows:4 windows x86 arch:x86

89660f29dcc4de5ed7b243a59d997a35

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
WinExec
GetModuleFileNameA
GetSystemDirectoryA
FreeLibrary
Sleep
GetModuleHandleA
GetStartupInfoA

user32

CreateWindowExA
PostMessageA
DefWindowProcA
RegisterClassExA
GetMessageA
TranslateMessage
ShowWindow
DispatchMessageA

msvcrt

atol
_controlfp
_except_handler3
__set_app_type
rand
sprintf
__CxxFrameHandler
fwrite
??3@YAXPAX@Z
__p__fmode
??2@YAPAXI@Z
fopen
strchr
strncpy
srand
time
fclose
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE