8dcff72de608b9eead361aa563a2e607 | Triage

Sharing

General

Target

8dcff72de608b9eead361aa563a2e607
Size

69KB
MD5

8dcff72de608b9eead361aa563a2e607
SHA1

13ad013d0531707daad2637aa6710efb944c90be
SHA256

4bda60f5865e2776ae2049bb67bc8241896bad66c48288fde4594bb63eddc5a6
SHA512

b3c31e4ed7bbdd6138ba7105dc9bccc40239104e7de6b88c7912906dbebd32ecee517cd55b940d872c36e5959c489844647a5a7df543456d7c5c8a27ae6efe5c
SSDEEP

1536:eVR4RVkCQCphLTb1qGCCQeAhdC9Nj4eHOMq0SHyi:c2fVQCphLvrCwArfepqxHyi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dcff72de608b9eead361aa563a2e607

Files

8dcff72de608b9eead361aa563a2e607
.exe windows:5 windows x86 arch:x86

11904e9e1b8f2fd0455566f294ad0aa2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
fopen
_exit
_vsnprintf
fwrite
exit
strlen
strrchr
__getmainargs
__set_app_type
_XcptFilter
fclose
malloc
strcmp
free
__setusermatherr
_except_handler3
_onexit
_initterm
_acmdln
fprintf
sin
__p__commode

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

krfimps
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE