b8c5843886d403e54e11aebdfa398ab8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8c5843886d403e54e11aebdfa398ab8
Size

26KB
MD5

b8c5843886d403e54e11aebdfa398ab8
SHA1

065cfb462dbdf56b24c910938c3244505745cef3
SHA256

7189a6687688c90cad4944fc8b63c8183176b91e2f7437b24fb0be16b0b2f53e
SHA512

36a410874c4876aaf428ff5b443c82b9c541041095664f49ce71a6d4761bf54bfa1e9b65469e4f1be9b2ca0fb78a505bcb679c6adf975e230aae369b21ec32c2
SSDEEP

384:7fe1IpFtYsJ0A/BwwofZGmEdhUxlby45LX69n1Zui8/:+GFR8wofZGTD45mnHq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8c5843886d403e54e11aebdfa398ab8

Files

b8c5843886d403e54e11aebdfa398ab8
.exe windows:1 windows x86 arch:x86

fd35488840486ee755322bfc360d7a0b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetProcAddress
GetModuleHandleA

user32

GetKeyState
WindowFromPoint
AnimateWindow
SetActiveWindow
GetFocus

gdi32

LPtoDP
EndDoc
SetMetaFileBitsEx
SetViewportOrgEx

shlwapi

PathSetDlgItemPathA
SHDeleteKeyA
ColorAdjustLuma

Sections

.idata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_MEM_READ

.code
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ