8f44479f80997b66330f3e3f6ba7cbc9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f44479f80997b66330f3e3f6ba7cbc9
Size

745KB
MD5

8f44479f80997b66330f3e3f6ba7cbc9
SHA1

f03336dbf11b1b69e46b5f602d1bc1aae2d74398
SHA256

cb783dedabd1b1a3277beabe77e4879a533dd4a3dbf7fe81b46a83cd80f73441
SHA512

ed10566585e54a8652e196d4a92fb36482f6a0439f4c9e13fe7b889890fd171146fbc3f21d1ace629b907255958a2e2a3323481597542b967757397675fcf03e
SSDEEP

12288:sNiLrR0v6QN2OJIhE6kLvYM8D+ARAlFzrwM1tD8gOZ50X+Csohs888eXqc7Dj6lu:sFi22mI26ks2Hrx0ksE1c7Djgu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f44479f80997b66330f3e3f6ba7cbc9

Files

8f44479f80997b66330f3e3f6ba7cbc9
.exe windows:1 windows x86 arch:x86

0bb9bfeb0311b52774cd9b0abbaa335e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
VirtualProtect
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess

user32

DialogBoxParamA
GetDlgItemTextA
EndDialog

gdi32

BitBlt

Sections

.code
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE