8fa69f9d9accc5cfd73318a89d9e20b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fa69f9d9accc5cfd73318a89d9e20b3
Size

301KB
MD5

8fa69f9d9accc5cfd73318a89d9e20b3
SHA1

06e7ff6099a4bcbe86f20c1839346cd8ffce3da6
SHA256

e97d46d59d07f41f1b40561f854956f6f4bcc6a8b93b73656b1e5c3f83460646
SHA512

07dc84c484cfd5e142daf80c6c8d121cf88b422071850f8bc0ff011999c8fce5b2f64609cb8c5d28b4200b77b5497b0603d3d03ce3cbbd530dcdbf65d530f810
SSDEEP

6144:MJEYERqaQiEYixXAkmOgoUpMEEdlntRb5A+na4S3lfEQwM:O5+qntJxjfg5mxdltZ5A+na4TQwM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fa69f9d9accc5cfd73318a89d9e20b3

Files

8fa69f9d9accc5cfd73318a89d9e20b3
.exe windows:4 windows x86 arch:x86

92bfd8d0eccfd8944769d829f6305c80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

SaveDC

ole32

OleDraw

comctl32

ImageList_Add

wininet

InternetOpenA

wsock32

WSACleanup

Sections

.text
Size: 295KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mmym520
Size: 56B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE