8eb1fdb854120d3b683e044797d339b9 | Triage

Sharing

General

Target

8eb1fdb854120d3b683e044797d339b9
Size

131KB
MD5

8eb1fdb854120d3b683e044797d339b9
SHA1

2ca830d125795223780fdb17204fd2587f4f557a
SHA256

acad5bb311e4aa757c94f7a9bf0b54c0f272eb027be819105e330f018b673972
SHA512

35a0e010a4a94aaa54a1f2774c76bb07cf5c0971171d4d03ce5da941f5f9c4181af4439ba18cd653cbf3ba155cd12fe12205e03b9a7e60600bb082548dd9b8f4
SSDEEP

3072:aFrdyWazwEzZTjJdvbJf2F4cMcNUKbQSjl:cdyJMEzZTrvbJ5H6fp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eb1fdb854120d3b683e044797d339b9

Files

8eb1fdb854120d3b683e044797d339b9
.exe windows:4 windows x86 arch:x86

b40505e51a975b9808925f6e6fe70bd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragFinish
SHFileOperation
SHFormatDrive
SHGetFileInfoA

kernel32

EnumDateFormatsExA
EnumTimeFormatsA
ExtendVirtualBuffer
FindFirstFileA

msvcrt

_wgetenv
_winmajor
_winminor
_wmakepath
_wsopen
_wspawnle

comctl32

ImageList_GetFlags
ImageList_GetImageRect
ImageList_SetFilter
InitMUILanguage
ImageList_GetDragImage

Sections

.text
Size: 63KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE