8f830e8a0ea06ceaee80e12e31b7d1bf | Triage

Sharing

General

Target

8f830e8a0ea06ceaee80e12e31b7d1bf
Size

187KB
MD5

8f830e8a0ea06ceaee80e12e31b7d1bf
SHA1

79ea1b20a02ae64e1c1a183728ff3ef8c8669a7a
SHA256

62ec4c5f0cb4fa70077bcf5ee8cb7891a8796ffce07238fd702bfe9780a3392f
SHA512

4b7b18227d7ff425bd4fa0b6d03d0a67d3e8dcc18a20cb215ae1be620c049c588730f9d8bae5664c546b62c259e690a006fe18c53071cb258011798162d9df13
SSDEEP

3072:P8aV2+EP0+gR0gezKw6gcrj6A5qSOiR5b9rPjPo1pXlDQZw:2+EPbJgZfqdgb9rPzkXhQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f830e8a0ea06ceaee80e12e31b7d1bf

Files

8f830e8a0ea06ceaee80e12e31b7d1bf
.exe windows:4 windows x86 arch:x86

cb261893f5147d9fb85a4cd33e3abc5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLongPathNameW
GetModuleHandleW
CloseHandle
SetThreadContext
LoadLibraryW
GetCurrentThreadId
GetLastError
EnumResourceTypesW
UnhandledExceptionFilter
ExitProcess
GetCurrentProcessId
GlobalFree
CreateFileW
GetProcAddress
GetVersionExW

msvfw32

ICOpen
ICSendMessage
ICClose
ICDecompress

user32

GetClientRect
AdjustWindowRectEx
SetCursor
InvalidateRect
PostMessageW
SetRectEmpty
GetWindowPlacement
FillRect

advapi32

RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyW
RegEnumKeyExW
RegQueryValueExW
RegSetValueW

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ