8d36998a321c4923e16961ff9fe8b7be | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d36998a321c4923e16961ff9fe8b7be
Size

392KB
MD5

8d36998a321c4923e16961ff9fe8b7be
SHA1

e3687935e4cd9e55978ad0472d372ff5f4f1fd9b
SHA256

e44f914a116bdfb61220bbb5f529de0bde6e8847943cd16c405f1f78d80bd528
SHA512

e581173bff2bd320057c31f71d586576d3d11db08899e933a7629018654949eeb90b9b83343f597c09c0029939fdd8310830298eed516813723dbecea8113c17
SSDEEP

12288:sGGmLdw5YRXnFb4iiXJo/VqiGFIG2oNw5qQ:sGGEdwORVb4iiX2tzGyG2oyt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d36998a321c4923e16961ff9fe8b7be

Files

8d36998a321c4923e16961ff9fe8b7be
.exe windows:4 windows x86 arch:x86

1024cb8fb7352a8e492f4c7cedec1706

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GlobalUnlock
GetModuleHandleA
HeapCreate
GetConsoleAliasA
GetCalendarInfoA
GetACP
FindClose
WaitForSingleObjectEx
GetConsoleCP
CreateFileA
Sleep
GetLastError
TlsGetValue
FreeEnvironmentStringsA
LocalLock
CreateFileMappingA
FindAtomA
LocalFree
LoadLibraryExA

user32

GetDlgItem
DispatchMessageA
DrawTextA
GetMessageA
CascadeWindows
DrawEdge
GetIconInfo
IsWindow
SetFocus
CallWindowProcA
GetDC
DefWindowProcA
CreateDialogParamA
MessageBoxA

msasn1

ASN1BERDecEoid
ASN1BEREncFlush
ASN1BERDecNull
ASN1BERDecCheck
ASN1BEREncLength

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ