c8de13dac08f317ea867fef8264c0136 | Triage

Sharing

General

Target

c8de13dac08f317ea867fef8264c0136
Size

50KB
MD5

c8de13dac08f317ea867fef8264c0136
SHA1

6ed101eeb11f454cadda90fc2b4cea7af8318937
SHA256

7fc0d8536d5d363175a6af99a56e6fd17c0bd25325cf9b5c43e7610329792b79
SHA512

5e8ce32c968b11e124f2812fe5056b7278ac7916891c53c2f32ac88304b5defc458063871dad34b3b4d5559210ae16618c00aa4abfaadd60eb2845478ad9fe67
SSDEEP

1536:Q2x6JbsIBnf97PwkrwYeGoF+UFRHwZy+c5XX0vGVT87M:5cJbsIR17Pwp7GRuNsGt8A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8de13dac08f317ea867fef8264c0136

Files

c8de13dac08f317ea867fef8264c0136
.exe windows:5 windows x86 arch:x86

f2f2fccb3288b83edc7b6f6bb775defc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIA
wnsprintfA
wvnsprintfW

user32

CharLowerBuffA
CloseDesktop
CloseWindowStation
DispatchMessageA
DrawIcon
FindWindowExA
GetClassNameA
GetKeyboardState
MsgWaitForMultipleObjects
PeekMessageA
SetThreadDesktop

Sections

.wroh
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yjul
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lwvyz
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ