c8c8b6cc9390e9c2ebfe66104e1e253e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8c8b6cc9390e9c2ebfe66104e1e253e
Size

27KB
MD5

c8c8b6cc9390e9c2ebfe66104e1e253e
SHA1

0d948c3fd6e25e4b38a31af3dcdd652bd6e08a8e
SHA256

75870190ee92b40590e3ad0e654622c9465b750131dfd6153e057668e6f513f8
SHA512

29eee700782d7a51e3c318e5b4ec4d3d1d1e2f2d374fec51051472e04b01501b9c631ad72ea0e2bdb849ddaf67be091cf8967c5c81c976b8741465215c556b7e
SSDEEP

768:Y1ptRdhOxcv67ZCptxmllat3/ylusnmLBFe:27XhBv+8txmPa5/uuVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8c8b6cc9390e9c2ebfe66104e1e253e

Files

c8c8b6cc9390e9c2ebfe66104e1e253e
.exe windows:5 windows x86 arch:x86

8e0890cd29643509891174d00643b732

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

atl

AtlMarshalPtrInProc

ntdll

NtAddAtom

kernel32

SetLastError
DisableThreadLibraryCalls
FreeLibrary
GetProcAddress
GetCurrentProcessId
LoadLibraryW
GetCurrentThreadId
VirtualAlloc
GetTickCount
GetModuleHandleA
QueryPerformanceCounter

Sections

.textbss
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ