8fb7326bbd51e983a78ce26003bd9301 | Triage

Sharing

General

Target

8fb7326bbd51e983a78ce26003bd9301
Size

92KB
MD5

8fb7326bbd51e983a78ce26003bd9301
SHA1

2f9e4f2a6956f1f724ff7ac91a3c4b7fb49fe18c
SHA256

35aff349edf5c3f199f4f0d0627792deed3350a339e7d40a906976a3efc1c6df
SHA512

49222ebae806f3d19b7609f80082769915cdb01a59bc9813c9641a323b41d8ac0b3b312f81761dace2cbadfbd88c99d8ae72c440e3fdc39526a5be02bf0ff497
SSDEEP

1536:qTaE8lajyL7G4zR3WhHbceqtt12QJZP7mtbZqVjvfeblaxddcH:qGEK7rRm5+ttAUR7mtbZqVrfeMO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fb7326bbd51e983a78ce26003bd9301

Files

8fb7326bbd51e983a78ce26003bd9301
.dll windows:4 windows x86 arch:x86

a9547091a06a6a6ef52bf7ac2b9fd79a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

seyiincbaeck.pdb

Imports

kernel32

GetFullPathNameW
SetEndOfFile
GetDiskFreeSpaceExW
GetLogicalDriveStringsW
GetCurrentProcess
DeleteFileW
GetSystemInfo
GetVersionExW
SetFilePointerEx
GetModuleHandleW
GetCurrentThread
GetDriveTypeW
FormatMessageW
GetProcAddress
CreateHardLinkW
GetModuleHandleA
GetVolumeInformationW
GetTimeFormatW
LocalFree
GetFileSizeEx
GetDateFormatW
CloseHandle
GetLastError
CreateFileW
DeviceIoControl

advapi32

LookupAccountSidA
OpenEventLogW
LookupAccountSidW
RevertToSelf
LookupAccountNameW
AdjustTokenPrivileges
AllocateAndInitializeSid
LookupPrivilegeValueW
CheckTokenMembership
CloseEventLog
OpenProcessToken
OpenThreadToken
ImpersonateSelf
ReadEventLogW
EqualSid

Exports

Exports

upomu

Sections

.text
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ