ac8d3afd0691dd3e78a3cbce1b0893fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ac8d3afd0691dd3e78a3cbce1b0893fe
Size

191KB
MD5

ac8d3afd0691dd3e78a3cbce1b0893fe
SHA1

60e8d55b0b7bd1f599024e087f1c83a18d656bd9
SHA256

9c74475c89e64455e609e1f6fd371fa4a069903abb1127af0375c0269faf7c12
SHA512

d2a345edff578f0c46c33efba9963155f9f43f20452f9c1257e13ff1b3a2b1643243e6c1d2f8c8b6aaa3c2f495da7ae068c8eb43d6277ae9bdf9b32dc17b1f19
SSDEEP

3072:Ckw3d25ynJvbD5qPArv9/1HgCA15FZkMTpchkCQ5EwAHAIt1gAw1s/ih+8:xw3Y5SJvAPKtHgCAYMcfQEwvkGT1sW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac8d3afd0691dd3e78a3cbce1b0893fe

Files

ac8d3afd0691dd3e78a3cbce1b0893fe
.exe windows:4 windows x86 arch:x86

c87d79d4aedd2a5806b4f002839d0321

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHGetSpecialFolderLocation

Sections

CODE
Size: 172KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE