c8a77831eeaf7d17ef4e83e85e0605fa | Triage

Sharing

General

Target

c8a77831eeaf7d17ef4e83e85e0605fa
Size

111KB
MD5

c8a77831eeaf7d17ef4e83e85e0605fa
SHA1

68ad7815b514111a48bd6b0a414ea2e66abe7fbe
SHA256

24dc9bd87d4bf5af5098943b8a293e34ddd2b9e35367c994379ca6277e819791
SHA512

7b833a5c845e7d452b69ff7a29094281819c773b313b82519679a6459f0a27ac771f7d6e486669c967ccc53f3f04965b9bbd28d6e9a90f6baf1fbd11e6bd60a3
SSDEEP

3072:iXrFzL5OuRBnvV6Ci42FTieI9BPebAPTMHJX:YBzL5OgBv7UTkhy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8a77831eeaf7d17ef4e83e85e0605fa

Files

c8a77831eeaf7d17ef4e83e85e0605fa
.exe windows:4 windows x86 arch:x86

97c1770361601ced061f0fcd8b2d5982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

StretchBlt
SetICMMode
SetRelAbs
ResetDCW
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage

kernel32

ExitProcess
TerminateProcess

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE