8d1e1b907346a49e26881186254a69de | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d1e1b907346a49e26881186254a69de
Size

182KB
MD5

8d1e1b907346a49e26881186254a69de
SHA1

9cdb8d0b9f7867bd322039850d2d0945bb08b82e
SHA256

5ba0df92ef0336b6a0a56f11003f4ec7ec6d1010ec123195f7c5962ca11e250f
SHA512

4c30e449d05263011293e2b4e19ce20c191e535371a93a8e42e381bffbdced198d27c2a486f55786229c02ddcd90ca2fa33e0d4f47a056802dcb144e5e4db1a3
SSDEEP

3072:c/Revig/NGcP8bAmh7vouXcbff8zBXwhC0kFZOG5sLHJIzMMruf09/W:qR81GYVm+0cbfUzBAhC0WIKIHAV9/W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d1e1b907346a49e26881186254a69de

Files

8d1e1b907346a49e26881186254a69de
.exe windows:4 windows x86 arch:x86

7c4bae5282382cf2fd378c39d5bcde30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
GetComputerNameExW
GetProcessIoCounters
FoldStringW
GetTapePosition
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

UnpackDDElParam
SetDlgItemInt

Sections

.text
Size: 5KB - Virtual size: 810KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE