8cd4290efa70793b188ebda4f08d4c2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cd4290efa70793b188ebda4f08d4c2c
Size

17KB
MD5

8cd4290efa70793b188ebda4f08d4c2c
SHA1

e672dd7e878da126a0caec65773788f39d678d00
SHA256

4a068410a16bfc2995b7294442d8184add2c87cc4aaf92febc9cc3f73133007c
SHA512

65742cfdb51e583d8e5ea2d40629bfd45c5d72f2fc913a8d93231853338554481625f3b55cdb59f68428641761f6a54139b3077353a9a0647e56f8bf33a3fd82
SSDEEP

384:DOq5Yl1nLtQiLnfHp86WL3CiEE9FQh1p:Dp54tQQfHp86WzCiEE9FQh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cd4290efa70793b188ebda4f08d4c2c

Files

8cd4290efa70793b188ebda4f08d4c2c
.exe windows:4 windows x86 arch:x86

406de7aa000a6030b668caed148bfc5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
FindWindowA
wsprintfA

kernel32

CloseHandle
CreateFileA
CreateThread
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetTempPathA
GetTickCount
HeapAlloc
LoadResource
LockResource
RtlZeroMemory
SizeofResource
Sleep
WriteFile
lstrcatA
lstrcpyA
lstrlenA
HeapFree

shell32

ShellExecuteA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyA

shlwapi

StrStrA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ