8c5adbcdece633ea2999fdba9ca137e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c5adbcdece633ea2999fdba9ca137e5
Size

37KB
MD5

8c5adbcdece633ea2999fdba9ca137e5
SHA1

07e562be3bdb43585f1a47e48e3955a15a88ce49
SHA256

0fd137db325e403c034fc021a735e56b2e679418ede4c640225f619a145f9bc9
SHA512

c645c99a452317164c181a2116323aa684616123530090a1768ca2af0e108c34dde6c669a8ca0b2fb172b6b40fcf9abada6e19408e6de51c0323862ce105ad52
SSDEEP

768:Yv0XuWH8EFjOF/sw/dGoueRsHnzGc0qUAdme4hilpwI3MXvJi8E:YRE8IjOlndGoWHzVXdmdQlpwPfJZE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c5adbcdece633ea2999fdba9ca137e5

Files

8c5adbcdece633ea2999fdba9ca137e5
.exe windows:4 windows x86 arch:x86

2fb438cc24f64b6ab34ed347419cac06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
VirtualProtect
GetNumaAvailableMemory
FillConsoleOutputCharacterA
SetInformationJobObject
Process32NextW
lstrlenW

user32

GetThreadDesktop
ReuseDDElParam
HideCaret
GetWindowRgnBox

gdi32

Escape
ResetDCA
GetTextFaceW
UpdateICMRegKeyA
GetFontData

Sections

.text
Size: 1024B - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aBc
Size: 184B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ