8db79a88752b68362e6ccbad7540a587 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8db79a88752b68362e6ccbad7540a587
Size

12KB
MD5

8db79a88752b68362e6ccbad7540a587
SHA1

0a0bb0f22b4b1decdc59695c319c0ea42c6fc4df
SHA256

2a21e9f6e2ef2292a579e01d1a523e3a5ce2ba603ff3a33369ecf27cd3fc310d
SHA512

ed0c369834191d7a481bf40538b88264f3da10e854d973957d1148a1f1ae0c301789e7de80223442741f94800faf4e3d51cb43ad6fb88226ae0b2b53d5c9049e
SSDEEP

96:MjxGRrwMRuOMA4lwPF5aokyqRzqHp41Q:hREkmAyB8pUQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8db79a88752b68362e6ccbad7540a587

Files

8db79a88752b68362e6ccbad7540a587
.exe windows:4 windows x86 arch:x86

69d31e0e9242713e77170462fda3b614

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetClassNameA
DestroyWindow

kernel32

GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ