8f93c816a423f538b12d993c8fcfcce2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f93c816a423f538b12d993c8fcfcce2
Size

153KB
MD5

8f93c816a423f538b12d993c8fcfcce2
SHA1

11022b1c908120d417719b2ab5da185788841d76
SHA256

c9c42573c94e91132ecad654415c8b9c168a89a0f7cf201aaada321acbfe03b5
SHA512

924932a4d88e76592dfc7f3c2b84e8adb6483cf3c816a5fe0b60c627f2a8e5784a8dc5ed5fdb9608e60d5760a9d98549655d2edef3e82b9c88e3412ba85e89a4
SSDEEP

3072:554sVVFJd7brYHj1PmBYX41Al8/0JiXYLum6eldIqLyzVd9AUSjDSA7OO:T4aVFDbYHJcMc0JjKmdAq4/9AUTAz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f93c816a423f538b12d993c8fcfcce2

Files

8f93c816a423f538b12d993c8fcfcce2
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE