8d2fb2f613b2dd3d8cfd7c3ccf412b7c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d2fb2f613b2dd3d8cfd7c3ccf412b7c
Size

32KB
MD5

8d2fb2f613b2dd3d8cfd7c3ccf412b7c
SHA1

2d06917da1075d04e5281415e136ce9a5058bef6
SHA256

425b446aa0578f45aeb46615be8342d62e249f810ce3d62e120b03da06f92187
SHA512

6a4c0c1cf410e52e4fb98b2930281ca49dec29b58ef862ae86be0a5ceda91aef64e23cdc085c31261c218a268fde1c8b45b710734259d9c9601e3b1430426488
SSDEEP

384:L1CTOTJySWCuUZCAy3mlLePmigKv44+ZiqjiqPxE/oZElR:L1QsJyauoggKv44+GsxwoZe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d2fb2f613b2dd3d8cfd7c3ccf412b7c

Files

8d2fb2f613b2dd3d8cfd7c3ccf412b7c
.exe windows:4 windows x86 arch:x86

eae40198a46e8ccea8a1ea9280b82fb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
SetStdHandle
CloseHandle
LoadLibraryA
GetProcAddress
GetOEMCP
GetCommandLineA
GetVersion
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
ReadFile
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
GetCPInfo
GetACP
GetStringTypeW

odbc32

ord24
ord75
ord41
ord3
ord11
ord13
ord43
ord31

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE