8ee4747c74c46c6dd0a142da927bba31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ee4747c74c46c6dd0a142da927bba31
Size

382KB
MD5

8ee4747c74c46c6dd0a142da927bba31
SHA1

bc48162b216d108dd2dd8c8895adf730b800f2cd
SHA256

44f649066167d11c45ae1f8a92247beec0116919676f87b38191305ed1f4cb44
SHA512

c25981c7fb8a230f2a21d1f8722efb8248e6b7a4970944b3ff581a0899c651bd4a0dd76f485e154946bebe97c0276b830e2cbb1010cd48e9ac88158a3a802e3e
SSDEEP

6144:jhwYDRMSt9NmwZPJCJi2oU0zBIDoGbNjEg9XHD73g3+Gq/nTngb0L1DdE:jieRMK9N/RJHUlzNQAXXg3RggAjE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ee4747c74c46c6dd0a142da927bba31

Files

8ee4747c74c46c6dd0a142da927bba31
.exe windows:4 windows x86 arch:x86

054052e1f236eb63911a9918633d82ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GlobalFree
GetCurrentProcessId
WriteFile
ReleaseMutex
GetPrivateProfileIntW
GetCurrentThreadId
CreateEventW
SetEvent
GetEnvironmentVariableW
ResetEvent
InitializeCriticalSection
VirtualAllocEx
IsBadStringPtrA
LocalFree
lstrlenA
GlobalFlags
GetDriveTypeA
CloseHandle
GetLocalTime

user32

DispatchMessageA
IsWindow
GetClassInfoA
EndDialog
CallWindowProcW
GetClientRect
GetSysColor
DrawStateW
SetFocus
GetKeyboardType
GetSysColor
CreateWindowExA
GetCursorInfo

mmcshext

DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow

advapi32

InitializeSid

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 371KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ