8f6eac03081f3b4d78d3b10b118988f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f6eac03081f3b4d78d3b10b118988f2
Size

273KB
MD5

8f6eac03081f3b4d78d3b10b118988f2
SHA1

cf12c4fd8c4b09c624881005f2b3dbd67b93ff1a
SHA256

9fc93a634d694d227cba937f4c3a1c8f188a4fcb36ef2870b00f4b5a02b164fa
SHA512

f6fd4d5639fedb09557fb7a19f484c362c2435544590dde79eb72e08a6110e74468cb58aac0b3eb01962e338b07166a5ff94f7541eb02250f0d2bc2cd8615746
SSDEEP

6144:Lg0VfCM7Li0wuEwHDw7rZ7bqhrLGODrruY/x0GGvdy+11/ifglmYNTiCpO:Lg0FR20PEm2Z7qXGgXT/xDiy+1oorNJk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f6eac03081f3b4d78d3b10b118988f2

Files

8f6eac03081f3b4d78d3b10b118988f2
.exe windows:4 windows x86 arch:x86

58bc315907d66bd6874cde66e709755a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

_CIcos

Sections

.text
Size: 22KB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE