8f9a8a19b132825dbb48e33d29a2be40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f9a8a19b132825dbb48e33d29a2be40
Size

38KB
MD5

8f9a8a19b132825dbb48e33d29a2be40
SHA1

cf3ee88f6ed84b48ef794c14f1292bf94f59a1ab
SHA256

08fe68dd99b8af6a6c55de7de861ee8a18b522ab394b05a16eda86c2676e6607
SHA512

cf5992efc9f930c9a8f8b0f4f674babc8c0ea6c1b33ef89efca097fd9e50433a66b3125806c728350d5eaf8044a6cbbb9a35632edcfa44dd35321b2f82371157
SSDEEP

768:EoGBwgQ9xh7miRJsKue84EZ43eX/rUI/w9bbVAAtFPoIlan8r:EoGBwgc7miL85ZGWQIohZAAfm8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f9a8a19b132825dbb48e33d29a2be40

Files

8f9a8a19b132825dbb48e33d29a2be40
.exe windows:4 windows x86 arch:x86

9e1048df170a525bae12059b67d988f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
GetWindowTextLengthA
GetParent
GetWindowLongA
GetForegroundWindow
CloseWindow
GetClassLongA
GetClassWord
ShowWindowAsync
TileWindows
GetLastActivePopup
WaitForInputIdle
IsWindowUnicode
SetParent
AnyPopup
GetTopWindow
SetForegroundWindow
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE