8fa9e65b7056143421c1034da34f74ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fa9e65b7056143421c1034da34f74ab
Size

56KB
MD5

8fa9e65b7056143421c1034da34f74ab
SHA1

efc354b68cc1fbd35b368a3cc033320f5ebea6ce
SHA256

50ffd3a40c256dafc589e1437789dfc51eeaeaa4bf6c8d94f8bd2e4c7db5f6de
SHA512

2de2170e047ced386b02a77b728a5bde89dac5c82b98a50b332f5a875f0f934017013b544da93bf7a4cb73a5d848cf08cde0a0fbd9a98cc41ec06c54448b4930
SSDEEP

1536:CIYLdG047l87QOPc+0GqiIv5Wg28b59P4WVVmsZ:yLdLmy73cVBou9Vf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fa9e65b7056143421c1034da34f74ab

Files

8fa9e65b7056143421c1034da34f74ab
.exe windows:4 windows x86 arch:x86

888f45ef0b05123c7ac4bddefd5a0c4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
LocalUnlock
TermsrvAppInstallMode
SuspendThread
EnterCriticalSection
GetHandleInformation
DebugActiveProcess
GetTimeZoneInformation
HeapCompact
GetFileAttributesExA
OpenMutexA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE