8eb48e6616744f90b7091e9bd1b7b2e5 | Triage

Sharing

General

Target

8eb48e6616744f90b7091e9bd1b7b2e5
Size

121KB
MD5

8eb48e6616744f90b7091e9bd1b7b2e5
SHA1

59962f32877be033778bfd5a9a676c620e8920b5
SHA256

b733e417b795682ffe01c674ea31a46fd61965ad8ac318088b1d57986b50ca80
SHA512

1b886f1fa1aa3904d72f16b92d1077e6ef9f9d6f9a7476f952ae7b0d5f4c78113020bf5c08f9a4baab6d084c24721f540b61999e3e479b3d975f36fc25f536d6
SSDEEP

3072:zvEPSLQbgC0QBEv3CJb9ZqJWe3L+Fb5Hg4HgST0sRqm:zE6LmzEv30KZ3YFASYIqm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eb48e6616744f90b7091e9bd1b7b2e5

Files

8eb48e6616744f90b7091e9bd1b7b2e5
.exe windows:4 windows x86 arch:x86

5ba5ea05b8100982bb7328252162eb13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetCurrentProcess
GlobalDeleteAtom
GetCurrentProcessId
EnumResourceNamesA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
ExitProcess
UnhandledExceptionFilter

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 484B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ