8fb668a2771be5ec19b28f51a22672cf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8fb668a2771be5ec19b28f51a22672cf
Size

54KB
MD5

8fb668a2771be5ec19b28f51a22672cf
SHA1

918b55928154494d66de81b3b7fada9add1e9e52
SHA256

d51d815953f593bc09bee874845bfe36cf9dabde1d04ff07aea452b980799ac4
SHA512

606bca9eb520c9e9ab2c83889c89bbe56ecf89a839880c9b1445264c42a533125d5917eefcdc697170d737a1622fa14365c77d1d7d3211540c389e0a5e3df20a
SSDEEP

1536:9UOvEvTI4x/1aO1QZQ4KzHwlZFdt7Cn44kChUo5J1/:F6TIVu4O0Fdt789

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8fb668a2771be5ec19b28f51a22672cf

Files

8fb668a2771be5ec19b28f51a22672cf
.exe windows:4 windows x86 arch:x86

e3b4a2171632b4a8a2ccfff7f17cdacc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceW
CompareStringA
CreateMutexA
ExitProcess
GetCommModemStatus
GetCurrencyFormatW
GetDefaultCommConfigA
GetVolumeInformationA
LCMapStringA
MapViewOfFileEx
SizeofResource
WriteConsoleOutputA
WritePrivateProfileStructA

advapi32

BuildTrusteeWithSidW
ClearEventLogA
CryptGetProvParam
EqualPrefixSid
GetCurrentHwProfileW
LookupPrivilegeNameW
ObjectOpenAuditAlarmW
RegConnectRegistryA
RegNotifyChangeKeyValue
RegReplaceKeyW
SetAclInformation

user32

CallMsgFilter
CharLowerW
DefDlgProcA
DragObject
GetMenuState
LoadKeyboardLayoutA
OpenIcon

gdi32

CreateICA
CreateRectRgnIndirect
DescribePixelFormat
GetICMProfileA
GetTextFaceA
GetTextFaceW
SetBrushOrgEx
SetWindowExtEx
UpdateICMRegKeyW

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE