8dd90f02bd4f1031e4a60744e1b8e4e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dd90f02bd4f1031e4a60744e1b8e4e6
Size

25KB
MD5

8dd90f02bd4f1031e4a60744e1b8e4e6
SHA1

f64067f0bdf2a51ccf0d8d6fec531dc41085c910
SHA256

c42544b8a51f5254bede81ac65cf79c0a5236e967666da4686f024a86ac86f78
SHA512

d2b61fce427363f56a35da40bfb14c5b9af16025b1ca6a856db5405cbf8dd28871941bd866a2c120efa1fe2009e33ed0be8d5de298ae6c7d42584ed54910cfea
SSDEEP

768:uyrPSF4lu5/vABcHmlv3SDpl1ndxoMkuw0oJlbG:u4QIlv329nvVw0oXS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dd90f02bd4f1031e4a60744e1b8e4e6

Files

8dd90f02bd4f1031e4a60744e1b8e4e6
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 18KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE