8f2a780843c98d9ad4fd61615e3b9709 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f2a780843c98d9ad4fd61615e3b9709
Size

224KB
MD5

8f2a780843c98d9ad4fd61615e3b9709
SHA1

283126a6c2ef2410d3dd3df9afd2388a29db01ac
SHA256

e5b5ae983ccd141a25ad0a40919d1c52dcf58489b4b7d5aef905063ce19d276d
SHA512

905044f3fad50175657532d17ee0bb950089535235f1479be44ae5e71aee8a5c5fbc896d01267ff24b9b10665722f64a2ba906faa9411926a208c15f269516b0
SSDEEP

6144:Y9A1z+R0XbqiMnS8hLgrJt+BPmIaOHds3SaVUdZGLU8obgx0:YSCRqbNBWhJOtseUe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f2a780843c98d9ad4fd61615e3b9709

Files

8f2a780843c98d9ad4fd61615e3b9709
.exe windows:4 windows x86 arch:x86

b71d8c1931cb0a297806c1529ed52c6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle

Sections

.text
Size: 222KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ