8f60af67cdec8d06632c802b43a9409d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f60af67cdec8d06632c802b43a9409d
Size

53KB
MD5

8f60af67cdec8d06632c802b43a9409d
SHA1

0e5ad02052c90d33dd2ee72d7d636b1508a48b54
SHA256

fdbe11d2b3173426d7fcc87c7b15eca8d7bbb94840f2709759b7c789d7ac4fe2
SHA512

a895e87fef608a2bc7920e28c71ca94b12b5c6a8925297efbc8013f72b47e868aa881ff7becf5266aa284f8b53d94f570da162369a9cb570973b4aecea778806
SSDEEP

768:eVG+FvG7Tuo33r8e/0ZK7MS0/gHkMaWGm2Funn2WJgaKSsGv8nx9rqZLUj6wEj:GG+RG7Kor8yx6gHkb8n2zdSsYMnrA5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f60af67cdec8d06632c802b43a9409d

Files

8f60af67cdec8d06632c802b43a9409d
.exe windows:5 windows x86 arch:x86

69dfb1c4a8e8a7c1a2054a652fd8db63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineW
wvnsprintfA
StrCmpNIW
PathMatchSpecW
StrCmpNIA
wvnsprintfW
StrStrW
PathFindFileNameW
PathFileExistsW
wnsprintfW
wnsprintfA
SHDeleteKeyA
PathRemoveFileSpecW

advapi32

RegQueryValueExA
RegCloseKey
CryptReleaseContext
CryptCreateHash
CryptGetHashParam
RegDeleteValueA
DuplicateTokenEx

Sections

.utajqx
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fgl
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itur
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ