8dbedf0b3101309497d0c2662241f872 | Triage

Sharing

General

Target

8dbedf0b3101309497d0c2662241f872
Size

428KB
MD5

8dbedf0b3101309497d0c2662241f872
SHA1

82d00b8fabecd6ced764bd33a0568089e5cf132e
SHA256

beb58032c18c1447731e2750d7fcb8dcad8b524215e500c8a920942d183edf1f
SHA512

f868642693d34b77eab25cdb0fb16fcd9256f189bbe04de3440345901c3f8666f40714022808c33d262aa5646f3f39b0feed044854347ae193fb19d22a46f748
SSDEEP

12288:3Y63yjL2WmYVQkKwQOr3S/BabfVTz64XaslRQ+Of:NyGTYukKwf7KBabVTzNKkzOf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dbedf0b3101309497d0c2662241f872

Files

8dbedf0b3101309497d0c2662241f872
.exe windows:4 windows x86 arch:x86

4644a3a6a6a9203e9f7a5d6738317176

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
VirtualFree
ExitProcess
UnmapViewOfFile
lstrlenA
GetLastError
GetModuleHandleA
CloseHandle
GetProcAddress

user32

wsprintfA

ole32

CoUninitialize

avifil32

AVIStreamCreate

crypt32

PFXVerifyPassword

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 777KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ