8f920aa0fea4a1eb61a2f36ede7717b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f920aa0fea4a1eb61a2f36ede7717b0
Size

101KB
MD5

8f920aa0fea4a1eb61a2f36ede7717b0
SHA1

b4f3ae17f3ae6c5be535f68d8ef222e1048f89b5
SHA256

3589f5e842a3a488f7de8c8b25c811d6d31370cb3bef37089792ef4670cb5c7c
SHA512

8b297b6880837199c1ad5d61e40cfe2dc47ba7040b074c472d075474eb1ae115740f08f84ece1463302e91d3b1592905d8789cb57d7be4c5ada16de01ef88213
SSDEEP

1536:nRO90WkpzzWG9ye9+O84EhxP7IT9IQr6sNDAT/QEHx2nc9:A21WGgk+ZTC9IQr6sNMT3R2c9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f920aa0fea4a1eb61a2f36ede7717b0

Files

8f920aa0fea4a1eb61a2f36ede7717b0
.exe windows:5 windows x86 arch:x86

344f2fece68d1462f97ab14f50148b74

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
ExitProcess

user32

CharLowerA

advapi32

RegCloseKey
RegCreateKeyA
RegOpenKeyExA

shell32

DragQueryPoint

comctl32

ImageList_Copy
ImageList_BeginDrag
ImageList_AddMasked

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BSS
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DAT2
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ