8c8c0db651a50035193ade71b3f3a123 | Triage

Sharing

General

Target

8c8c0db651a50035193ade71b3f3a123
Size

10KB
MD5

8c8c0db651a50035193ade71b3f3a123
SHA1

095f317a95212f9883fc8454bfd1e09fc8f6e773
SHA256

6fdfe104d4d704c6a0271aeb16f8175af8f3214adceedaf15caf8398784f60d4
SHA512

e746ea9f1aedca1d446dfaf9d16a87b4b319fba264a203cb623dd8a5a2057f1a616eecc6ee310ddc961c2b44cacafa9f15086ec790bbd99d6a05ebc0d03681e2
SSDEEP

192:zcKCfY0jOaMd8fIP57xX9jtl966qPMYFndsR:NCfY0fMd8fw7xtjtl96ZUwQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c8c0db651a50035193ade71b3f3a123

Files

8c8c0db651a50035193ade71b3f3a123
.exe windows:5 windows x86 arch:x86

445083cef576e5f84fcc0ecd697f4411

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateFileA
GetFileSize
FindResourceA
SetFilePointer
lstrlenA
LoadResource
WriteFile
CreateEventA
ReadFile
GetSystemDirectoryA
lstrcatA
GetLastError
GetProcAddress
GetPrivateProfileStringA
LoadLibraryA
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
VirtualProtect
CloseHandle
LocalFree
DeleteFileA
lstrcpyA

user32

CharUpperA
wsprintfA

wininet

FtpPutFileA
InternetOpenA
InternetConnectA

Sections

.f0Gx
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ