8e0c8e4b7239cc47aa9c2f3a43ca3ba4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e0c8e4b7239cc47aa9c2f3a43ca3ba4
Size

12KB
MD5

8e0c8e4b7239cc47aa9c2f3a43ca3ba4
SHA1

7f1ff4dc5c237694b439e12b0655b04a55fee744
SHA256

a63f53128865b7bbb5e3f97950afd818534122e5115bb3469552245b8296ee7e
SHA512

fe98e15cfdd76afe20919e144c0f864bfc03c61cb6cbc6f9e8d53e1ed690b7c8ea3edc4bbcf61cb1f16e22e2ab4c40264cf4a88020d19de14b305645669f13d2
SSDEEP

192:PIBkV11eNfchbQTfPe0ZEFC3v0okYMLWD6yHxjqgCZzdN5dNp2F6N:gBQqfc54mWEFC3soPD6zgCZzJ5r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e0c8e4b7239cc47aa9c2f3a43ca3ba4

Files

8e0c8e4b7239cc47aa9c2f3a43ca3ba4
.exe windows:4 windows x86 arch:x86

91568699b1d369823ebfb9645de03849

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
GetAtomNameA
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

_access
_getcwd
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fflush
fopen
fprintf
fputs
fread
free
fseek
fwrite
malloc
memcpy
printf
puts
remove
scanf
signal
sprintf
strcat
strcpy
strstr
system

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE