c8b2c5de5ac4f92f4c46f88d8d3cdbba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8b2c5de5ac4f92f4c46f88d8d3cdbba
Size

74KB
MD5

c8b2c5de5ac4f92f4c46f88d8d3cdbba
SHA1

6c23e917fe103526a42e7477d1fc9340cac753fe
SHA256

e3bf5e20e06c7e42dd76e923346336dda2d02c5ff39c22e60496d38dcc2272bb
SHA512

e84c98dfd8b91ead25e4e0008b17911e4415f8a0e1f90b2d50cd6a48cbedc5b233680d844f33624646858c2693fadd6107dbbd8451bcdd1623da02d54611f002
SSDEEP

1536:Aszzhue2GOneLeyY3BuBlkORqmNAY2zxJCS3DzgUyXp1ccn6GcRTwwfn:Fzzoe2hxuBOgqmNx2zPvfIHZcuwfn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8b2c5de5ac4f92f4c46f88d8d3cdbba

Files

c8b2c5de5ac4f92f4c46f88d8d3cdbba
.dll windows:1 windows x86 arch:x86

3873a035ae93d14b5ad09ce05e8339de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

gdi32

MoveToEx

kernel32

CloseHandle
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess

ole32

CLSIDFromProgID

oleaut32

GetActiveObject

user32

CallWindowProcA
MessageBoxA

Sections

.text
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.link
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

axml0
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

axml1
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

axml2
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ