8ffd9f1f018039fb53c842569d4a5a24 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ffd9f1f018039fb53c842569d4a5a24
Size

153KB
MD5

8ffd9f1f018039fb53c842569d4a5a24
SHA1

55b255caca1a4d5938856943a9294bba684b02b4
SHA256

23af24de850740086e7e2ddce07f370f606a4dfc1ee4eb0cf949cd74e42430cf
SHA512

59a1535a2bbe72b56ef0f3a6c3728243c1ab580c63ad543f18d32911fe46b62d5239364a21f2934896244fb627cea68d24014af9cf6f231e4a03451e0935e3ad
SSDEEP

3072:zecAbuMm6EcmmsVu/ZPmiF8wh6s+219qQ06+kL0YPwIYTTPPhYNH9X:zvmjmys+ZdLJ7qQj+kLjHUT3hy9X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ffd9f1f018039fb53c842569d4a5a24

Files

8ffd9f1f018039fb53c842569d4a5a24
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE