8f4a18b38996228a0ec25f39624a2139 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f4a18b38996228a0ec25f39624a2139
Size

24KB
MD5

8f4a18b38996228a0ec25f39624a2139
SHA1

733a75a76a676a2f21fd5bc227b77af761771ebd
SHA256

12c87779210cd1c3283f9d925a6dca09378323a40eae27cf5fe9a91c4eb1b8e0
SHA512

a87d1b51b82d23ae6dcfe93ca7853eb7a8ba3173e4d7d49ecb324b742fee4975c8427d75b9021aeacbaa33da0346c580a24e605c9180456c6a96ad2e3bdaa42f
SSDEEP

192:ecYIOFMCz7w+1Depa56OvOHSDBxl/ju2jQNP1oyhatFoHquKQ9Z1:BPy7h8HCd7u2y1/atFoKu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f4a18b38996228a0ec25f39624a2139

Files

8f4a18b38996228a0ec25f39624a2139
.exe windows:4 windows x86 arch:x86

a68f2d003bf0059afb364e625135ef89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleFileNameA
CloseHandle
CreateProcessA
MoveFileA
DeleteFileA
WriteFile
CreateFileA
Sleep
GetWindowsDirectoryA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

msvcrt

rand
srand
time
__CxxFrameHandler
sprintf
strstr
??2@YAPAXI@Z
_access
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
??3@YAXPAX@Z
atol
_itoa

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ