8cfd4373b364af578604c04603b0c462 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8cfd4373b364af578604c04603b0c462
Size

1.1MB
MD5

8cfd4373b364af578604c04603b0c462
SHA1

c775df9c376ac4e4cc05e3840dd6e4ea8f11446b
SHA256

f00bafafd5ba7d2b02dcaaf61282c290de976b65320cb97a63e66a2348661a69
SHA512

1fb020ad7fdaf2f5b43dadf690f2ee98e8a5e128cfe94c38be371356fda7fa71f41d781636636eeb1a14303de00dba9b18527327973806f40d968b82d0999552
SSDEEP

12288:meF+phWQXl+34PcXCnGxB38VbtyNAqjy1KOZ3anTS/5L:meWhlem5naV8lcUhZ3anTShL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8cfd4373b364af578604c04603b0c462

Files

8cfd4373b364af578604c04603b0c462
.exe windows:4 windows x86 arch:x86

15e5b7e387d3e2b2ed44fd1b22537312

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
GetTempPathA
GlobalAlloc
WriteFile
CloseHandle
GetFileType
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
CreateProcessA
GlobalFree
lstrlenA
ExitProcess
FreeLibrary
FreeEnvironmentStringsA
CreateDirectoryA
LoadLibraryA
GetWindowsDirectoryA
DeleteFileA
GetExitCodeProcess
Sleep
GetCurrentDirectoryA
GetCommandLineA
GetEnvironmentStrings
GetSystemInfo
AreFileApisANSI
GetVersionExA
ReadFile
SetFilePointer
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetTickCount

user32

wsprintfA

shell32

ShellExecuteExA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ