8df168620ca68e3316fcf4a8736f7054 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8df168620ca68e3316fcf4a8736f7054
Size

149KB
MD5

8df168620ca68e3316fcf4a8736f7054
SHA1

a85485b059fb27c69ea14d156efe556a3fc6a850
SHA256

a7ca6e254d3dfcba3c268ed5f5c2f4822e4f66eff307a1ee08f9c01911f8fb85
SHA512

01c5ee283c5fae756088df4964839aa76c4993a535e82062b932eeaeddab869e60529c92007fa36dd20f9f12cd409249a3d7c013893a53221b698e5d09dd6b7a
SSDEEP

3072:uumjoRCnjnGHPq91qeUsF84nOeaBk0ycBY+vC2yF6AucPl:cWGjnoEUeUsF3qB/ycBY+ol

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8df168620ca68e3316fcf4a8736f7054

Files

8df168620ca68e3316fcf4a8736f7054
.exe windows:4 windows x86 arch:x86

fad31f70781a255567bb4e12d45470a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
HeapAlloc
GetStartupInfoA
GetModuleHandleA
TlsGetValue

user32

LoadCursorFromFileA
ShowCursor

gdi32

CancelDC
GetMapMode
SetDIBits
CombineTransform

msvcrt

__p__commode
_exit
_XcptFilter
exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_acmdln
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ