8decedeef8d00a672a6a9d565d48a182 | Triage

Sharing

General

Target

8decedeef8d00a672a6a9d565d48a182
Size

333KB
MD5

8decedeef8d00a672a6a9d565d48a182
SHA1

e44df7a26c0f38ade5767eae007a0bfc5cca88cd
SHA256

b4e94d8db07afc81120d7903712260b66990101e15efe99f019073a8b8fa380c
SHA512

fd77ea92f05a69046c62b93dc9e61a6944fe75a0ac6391f740fa8abf83a5989036ddffc77387a139fdae3ead6fca22148fc6d58e9b872ab9afe170b744225d80
SSDEEP

6144:CBbyzoamoiNNhNcd7g2s6VZSzzr2NYV7eIlBCCAhteY/fm6vb480oAvPsnRmXXjO:qbyPmlbGkd6VZZNuB3AKy+6s85AvPimR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8decedeef8d00a672a6a9d565d48a182

Files

8decedeef8d00a672a6a9d565d48a182
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 293KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ccc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE