b8c8519e40c7d4fb105a89ba33501b7e | Triage

Sharing

General

Target

b8c8519e40c7d4fb105a89ba33501b7e
Size

872KB
MD5

b8c8519e40c7d4fb105a89ba33501b7e
SHA1

cad2759b454bc6f8cf50a5b799ac17f581fbb884
SHA256

c432756c4f332b231837f895c85790265b614dd42d0c7652cfad91eec6b43089
SHA512

10b567f6d228ded53cf810c6f4e89e51cfbcb59e8578ce95ca9b554ff83b71d74cfa97c182155da3b8b04347db9b2aa7e05d2c00e6a2b9cba528605c1b4de517
SSDEEP

24576:yCfEtSfZT7a2AigI644rMWW9FP86XblVO:DctuT7a1izerHWnTZk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8c8519e40c7d4fb105a89ba33501b7e

Files

b8c8519e40c7d4fb105a89ba33501b7e
.exe windows:5 windows x86 arch:x86

b84a891e5dc3f7b50be4d28e0b9f9423

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
LoadLibraryA
CreateFileA
LCMapStringA
GetCurrentProcess
CloseHandle

user32

CloseWindow
wsprintfA
CreateWindowExA
SetWindowLongA
CharLowerBuffA

advapi32

RegDeleteValueA
RegSetValueA
RegOpenKeyA
RegEnumKeyA
RegEnumValueA
RegCloseKey
RegQueryValueA
RegCreateKeyA
RegDeleteKeyA

Sections

.text
Size: 855KB - Virtual size: 856KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ