8faf3c5f3168ca00b172f4d7b5e54b9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8faf3c5f3168ca00b172f4d7b5e54b9f
Size

25KB
MD5

8faf3c5f3168ca00b172f4d7b5e54b9f
SHA1

978d518ea0ae9cde7e0361251d160f0ed8ae1950
SHA256

a931aecdd0777b78b702e24a8e0fd8f89cea5f46a87465a4890afc0adf939b7a
SHA512

9240dc1bebff85f9847b31e46e72b0c37eb4356d36de4141134cfb92c3d0c1ce9c2352ca378db1fadb48606e4e805672488b1b759d9b66815ed960d1336f3371
SSDEEP

384:f6p+1pDmpGivJ8OoYuLzdwmdEBSCZOLNTI70Yk/hL9/IOgZ4ibG:t1pDmpGiPeLzveBSCMNTG0hJgOgZDbG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8faf3c5f3168ca00b172f4d7b5e54b9f

Files

8faf3c5f3168ca00b172f4d7b5e54b9f
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE