8f936db8d2498e0c837cecf93afff871 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f936db8d2498e0c837cecf93afff871
Size

8KB
MD5

8f936db8d2498e0c837cecf93afff871
SHA1

ae22bacd850968867743126e03620717c45e8b2e
SHA256

5c091bb84b69eef47b9e0aafddcb4306f837353d9a78f12b24157eaa575704c9
SHA512

2898663eb662b34c3519f9798cd963f41f30b477907f30d355dd4fd4c0e9dfa3beb17be60f1eac9c8c8943c577cca21f50908cdff6d625097ef2b53da5eceeb5
SSDEEP

192:FrBxQkffsNAVa8lTd8qINSz9HhRdxeupagUByELO:fxfK8lqqI0z9dTIlL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f936db8d2498e0c837cecf93afff871

Files

8f936db8d2498e0c837cecf93afff871
.exe windows:4 windows x86 arch:x86

2a1b48bc7f9a93db0de4471d679405a6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
SleepEx
GetTickCount
GetCommandLineA
TlsSetValue
Sleep
lstrcatA
GetEnvironmentVariableA
GetShortPathNameA
GetStartupInfoA
QueueUserAPC
IsDebuggerPresent
GetVersionExA
TlsAlloc
CloseHandle
GetCurrentProcessId
TlsFree
CreateThread
lstrcpyA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE