8fb341f701cf9132dfb36300825a5b97 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fb341f701cf9132dfb36300825a5b97
Size

397KB
MD5

8fb341f701cf9132dfb36300825a5b97
SHA1

8f27bc47818235f37541e6c5dd081891200f7bb3
SHA256

8ea4aff8ae7df8f1de3a425a8429b23abe1afa698bf876fef264234aa0779469
SHA512

49ab48635dafdf7c98360e7cdf178f9443cc940a6ba2d8d154c3e0ed53cac259260f3b1938408d4b76c64912aa658257f28873fe7e849109a592d951638b39d7
SSDEEP

6144:oPlx6yaTzL44hHUHN/b6eZNWHEFGbk07P+3tBgs/LaaN:oivX0W0HdGuoHEYQGOtBtLaaN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fb341f701cf9132dfb36300825a5b97

Files

8fb341f701cf9132dfb36300825a5b97
.exe windows:4 windows x86 arch:x86

d030fd0df7224a833885941522acb849

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
CreateFileA
GetCurrentProcess
LCMapStringA
CloseHandle
LoadLibraryA

user32

SetWindowLongA
CloseWindow
CharLowerBuffA
wsprintfA
CreateWindowExA

advapi32

RegDeleteValueA
RegOpenKeyA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegEnumValueA

Sections

.text
Size: 150KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ