8f421b1a74933a805691b9a55364654b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f421b1a74933a805691b9a55364654b
Size

27KB
MD5

8f421b1a74933a805691b9a55364654b
SHA1

4a11013a353ed6ca76a8779fc8850bc886695cdc
SHA256

bdc644c90324c84b4895b97b74b775894ee1383ce431b2470f5867e3b0c34eef
SHA512

85845aebff2b9d9819725420fc65306d3766953c82a8112a4caf6f3e0067d086965c6e611d9341936d6ca7c2b32edc418650a9b26f58ba98e2c57c1e9ed805ec
SSDEEP

768:vxcMoNwTVuwPkpQOHQwq+OuIDTuP2TqgLShBr:vxcJAowPkbHdTOTTu+NLsr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f421b1a74933a805691b9a55364654b

Files

8f421b1a74933a805691b9a55364654b
.exe windows:4 windows x86 arch:x86

9c8ff49bcceceb095a1b6bac62486dde

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetCommandLineW
CreateEventW

user32

GetFocus
CharNextW
PostQuitMessage

gdi32

Escape

Sections

.text
Size: 1024B - Virtual size: 934B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE