c8d4f5922773a8e6cc92a4917d77d643 | Triage

Sharing

General

Target

c8d4f5922773a8e6cc92a4917d77d643
Size

76KB
MD5

c8d4f5922773a8e6cc92a4917d77d643
SHA1

179fa026c842f0f2d9eeb8d4e1aa244c3f2a318d
SHA256

252fd0f3f1031d8c9c6b0c3126ccdbc3600d86cbf937d0d17a52fc57df1124fb
SHA512

edfb95c323e9b19726349b3451b38b58a54f9db0e3baf1769ea68101c30d592c5106a1d60599a0a5dc0e449ca71f4fdc11a2e1adc90e93d46ff7d403e9da1119
SSDEEP

1536:OFwCE0j1yA8n8a13pPvxqDgVrCDxxYJ/7Y3EjnSAT3PpBX62pjVrs2ryrd1vUQuP:iQzD4DsVN3322Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8d4f5922773a8e6cc92a4917d77d643

Files

c8d4f5922773a8e6cc92a4917d77d643
.exe windows:4 windows x86 arch:x86

5df5d6edc9708ee7ead4a3555dc8ce51

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesA
IsDebuggerPresent
PurgeComm
CreateFileMappingW
GetCPInfoExA
_lclose
BuildCommDCBAndTimeoutsA
InitializeSListHead
ReadConsoleInputExA
IsValidUILanguage
GetNumberOfConsoleInputEvents

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE