8f1e4c533f65458879818d6e82c3312f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f1e4c533f65458879818d6e82c3312f
Size

254KB
MD5

8f1e4c533f65458879818d6e82c3312f
SHA1

94ac92cc6e72f0167615108a2629893628670b28
SHA256

68f3a032d897b6540579d9d727cc8fbc0b3eaf5f8935cd899eb326792821b8fc
SHA512

408020066fbddd7392439cec7e56063e6f0e28d43ebeb4e37d2b4f213efab41c0c80133c6378b7525860236f7b165a53d66459919f1b556559a92ca34d8e153a
SSDEEP

6144:eCcwpwu+3WT2eUsP8gBbFOCBThPVBBNc6:eCcwph+sUs0yFpPDBNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f1e4c533f65458879818d6e82c3312f

Files

8f1e4c533f65458879818d6e82c3312f
.exe windows:4 windows x86 arch:x86

768464a3c7ada6df88d0838e6bded08a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineW
RtlUnwind
CreateSemaphoreW
OpenFileMappingA
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

OleSavePictureFile
OleCreatePropertyFrame
SafeArrayCopyData
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureFile

wtsapi32

WTSRegisterSessionNotification

Sections

.text
Size: 131KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ