c8456ef078b7c537b5ffc361417e1a26 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8456ef078b7c537b5ffc361417e1a26
Size

393KB
MD5

c8456ef078b7c537b5ffc361417e1a26
SHA1

21f9c199e62ce06b59953af266acf7ce8f3795e8
SHA256

00b2878c6a8f19361eaff5c813a9a980155c1d6f665e02cbe7e35d6844a4f15e
SHA512

e2d2bb1133373fc0a27be7a025ebf63be1dbb40cf8cda04c330b2747e95c9de2f53ae2263556515472d7e4360a3cf268f8eaf0dd0dbbcbc02942204f8898bfb4
SSDEEP

12288:6MqFg7dUmmLen1G6Lkjr7plWzuDRsVq61:lqFg7dkenE6Qf7fpuJ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8456ef078b7c537b5ffc361417e1a26

Files

c8456ef078b7c537b5ffc361417e1a26
.exe windows:4 windows x86 arch:x86

fd7010a48390352781ad58cbcaf75843

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GlobalUnlock
Sleep
GetModuleHandleA
HeapCreate
CreateFileMappingA
LocalLock
LoadLibraryExA
LocalFree
FindAtomA
GetCalendarInfoA
FindClose
FreeEnvironmentStringsA
WaitForMultipleObjects
CloseHandle
TlsGetValue
GetConsoleAliasA
GetConsoleCP
CreateFileA
GetLastError

user32

CallWindowProcA
DefWindowProcA
SetFocus
DispatchMessageA
CascadeWindows
DrawEdge
GetIconInfo
DrawTextA
GetDlgItem
FillRect
IsWindow
GetDC
CheckRadioButton
MessageBoxA

setupapi

CM_Add_IDA
SetupCloseInfFile
SetupCloseLog
CM_Add_Range
CMP_Report_LogOn

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ