b8f85d2c30fae6f0f459ba0bd1f5f62a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8f85d2c30fae6f0f459ba0bd1f5f62a
Size

20KB
MD5

b8f85d2c30fae6f0f459ba0bd1f5f62a
SHA1

765600664502308cd6b6466ad1f7b4e4c7d11773
SHA256

634be47f78efeb4e645485e7a48c16ea230107e78252d33b27b206adfa598fc7
SHA512

5449b19e8bacfa3ce6aa85b1de362f4ec0ce13a3f168ec78952aeaa1060e99d259450165d96f23a58313abd89808f6c4629041c1ed44da2c22f0e9ac51e3aa78
SSDEEP

384:7YJ53FW75cgEudruyx05clo8OAt+Mt3BkWNALd9EZunUhZgw:i53u5cg7XqiljOAtr3sB9E+wgw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8f85d2c30fae6f0f459ba0bd1f5f62a

Files

b8f85d2c30fae6f0f459ba0bd1f5f62a
.exe windows:4 windows x86 arch:x86

48d4e0485b65ed9fe2002240609ed3db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

wininet

InternetOpenA

mfc42

ord815

msvcrt

_except_handler3

user32

EnableWindow

advapi32

RegDeleteValueA

shell32

ShellExecuteA

Sections

pec1
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE