8f8deb65eb07f435b5f62cf3b68d9cfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f8deb65eb07f435b5f62cf3b68d9cfd
Size

34KB
MD5

8f8deb65eb07f435b5f62cf3b68d9cfd
SHA1

1f6180050f55d1f0e91b9aa20fbf3e723a7c70ab
SHA256

05a4e5c43c1e18dbf6127e9b99cf3bbc19fdc0a0814f6697ad20caa571f9bcab
SHA512

2b82f56ff05485e71e740779ef7e18e305a4c65f7bfe395a0a39ebaeab908b2c6c66f465a6564fbf2ab45557ccdfbc1172a2b91e9fa774acd0a3320d676ac070
SSDEEP

768:20474PdjLZ2KDWvNmkPSUq79VjUcQlHn28Mvj8VbP:204ydFCvNmkaU+TUD+vY9P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f8deb65eb07f435b5f62cf3b68d9cfd

Files

8f8deb65eb07f435b5f62cf3b68d9cfd
.exe windows:4 windows x86 arch:x86

9baaad6c7eab40b2177c3bf6047ffd68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ConnectNamedPipe
CreateEventA
CreateFileA
CreateNamedPipeA
CreateThread
DisconnectNamedPipe
ExitThread
FlushFileBuffers
GetCurrentProcessId
GetCurrentThread
GetExitCodeThread
GetModuleHandleA
ReadFile
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateThread
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WriteFile

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ