8efa387c1ff8e57eb6b2bdaf843ee4d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8efa387c1ff8e57eb6b2bdaf843ee4d5
Size

350KB
MD5

8efa387c1ff8e57eb6b2bdaf843ee4d5
SHA1

a1f1cb89fed9d6c8753ef26381bde431e46d2966
SHA256

b29abd0d276ad08d2a38866dc14d6eff2a55d35222195b826bc53ff47cf7e92b
SHA512

ab74a848199e9eae8e7f834cb904470e5dcc8bb94170d1dc82e1364b9b86b7e96c0ea35a357e150372cb5c48da1e44f804d35633b69859d26e1a2073aee2493a
SSDEEP

3072:aiG8txTVSO5+Tyi1IdAmximmxZjHIdfC2hnw2CLW78A6BCUS67DEw9V3uozxNiEy:Vnn+TyiPihnV4WnULPEw9V3F4vmk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8efa387c1ff8e57eb6b2bdaf843ee4d5

Files

8efa387c1ff8e57eb6b2bdaf843ee4d5
.exe windows:4 windows x86 arch:x86

65b6862e9898b195f4ef7a1685fd82dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

memset

comctl32

InitCommonControls

user32

MessageBoxA

shell32

ShellExecuteExA

ole32

CoInitialize

Sections

.
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE