8dfc2848016f47e8584b461187ee16b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8dfc2848016f47e8584b461187ee16b1
Size

184KB
MD5

8dfc2848016f47e8584b461187ee16b1
SHA1

bea9737e9f43c56b0138eb1a73857041503ea69b
SHA256

0ac84523ec1280d0f6f6645c31004a98e462d869d4fe6ecc8159697682485961
SHA512

ef1e8ab5b1d06a20cbc2ab38e691c17d78b98dfbe5fff50d1e095bb1a973f8277cf616db2e9c12a66f3209263ebb5df14b0c16fb3ed29d86af773545988bea8d
SSDEEP

3072:4yM40B804M/eYE0ejv8Q8kBk51g2kIXIW:L0BzBqjv8v1g/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dfc2848016f47e8584b461187ee16b1

Files

8dfc2848016f47e8584b461187ee16b1
.exe windows:4 windows x86 arch:x86

a947a67c7813178cda7dc1771b1c3921

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetThreadLocale
GetCommandLineW
VirtualAllocEx
GetSystemDefaultLangID
GetVersion
LoadLibraryA

user32

GetMenuItemCount
GetMenuItemInfoA
GetMenu
GetFocus
GetMenuItemID
LoadCursorA
GetMenuStringA

Exports

Exports

_8u@4
IDX@20
iR
_V0F
w9
_ZE@12
_E9r
Bb@8

Sections

CODE
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eddata
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ