8c8191dd93425d125764d21c826007a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c8191dd93425d125764d21c826007a9
Size

936KB
MD5

8c8191dd93425d125764d21c826007a9
SHA1

fdfc8ec23f0a8ba751b734cf3908a4da7ddbb1d9
SHA256

e289cdf908fe44b46d28a9d3aafa781cfb89f29e869409cfe1c7450b27091452
SHA512

fd30ef37dfb3af9dac72dc421be1cf4984bf07e600d4f2e742d1999ab97f73b1df3966799a1445b39d546d5cc72bd8b8848633966dea698ed4bae98f2961e5f8
SSDEEP

12288:k+0kSZ4cKeRoCvQ6vKvf8I36raiy6DNobkH:B0eVAv3k0IqrNy6R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c8191dd93425d125764d21c826007a9

Files

8c8191dd93425d125764d21c826007a9
.exe windows:4 windows x86 arch:x86

715dbd27ec5c33df22772455a52fa829

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
GetCurrentProcess
LoadLibraryA
CloseHandle
CreateFileA
LCMapStringA

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegSetValueA
RegDeleteValueA
RegCloseKey
RegEnumValueA
RegOpenKeyA
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA

Sections

.text
Size: 896KB - Virtual size: 896KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ