8f8bce814107ef14e7fabdecbf1b6857 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f8bce814107ef14e7fabdecbf1b6857
Size

27KB
MD5

8f8bce814107ef14e7fabdecbf1b6857
SHA1

4a382b14686eea6e32ad76b81b1cd3b343c9c28f
SHA256

f9345877324dd56d58f3c0daaa4a5d0a13b2e6638d38b5f3cce6e61c65b48c8c
SHA512

287651217496f7cbade3957bd211ffc3431d16c9d501c410264bfabfabe61bd3ad85e7c3a2e3037b7a8cf9fcd490ca4fee3b9fa41216c388c9355988c3be8376
SSDEEP

768:EtIsiPeD/gnWiF6zMmSomu25IGadu1pnS:EZiZaSu25eanS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f8bce814107ef14e7fabdecbf1b6857

Files

8f8bce814107ef14e7fabdecbf1b6857
.exe windows:4 windows x86 arch:x86

a4cddb0e81d3ac529ea817dcfad884a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

msi

ord67
ord204
ord112

user32

CharToOemA

shell32

SHGetSpecialFolderPathA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
??3@YAXPAX@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??2@YAPAXI@Z
_findfirst
sprintf
_findclose
_vsnprintf
isspace
_initterm

kernel32

GetStartupInfoA
GetModuleHandleA
DeleteFileA
CreateMutexA
GetLastError
WriteFile
GetTempPathA
SetCurrentDirectoryA
CreateFileA
OutputDebugStringA
CreateProcessA
WaitForSingleObject
CloseHandle
Sleep

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE