c8f0055b1d3a67b0456e5d7aa3de4700 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8f0055b1d3a67b0456e5d7aa3de4700
Size

126KB
MD5

c8f0055b1d3a67b0456e5d7aa3de4700
SHA1

92bb52cf2f15cb4dcc2cb6b756e2104534cbc10b
SHA256

295e96a8ee3c25dcd5644dddddc319df973446d89c54c74a59c945348f5d9a2d
SHA512

b430102feb35d4258fbc58776967556edbbeb1b72f86d217f08c90c49fb5b15ad067ae3ac5729daaaa803b5183d24a681b703331b99ebdd3fbc97f44ed08d678
SSDEEP

3072:K2bIs0zyLeX4sW6q851KytAXkSIfY4QqWd7ct6:dDLa1zqXkSIhQqs7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8f0055b1d3a67b0456e5d7aa3de4700

Files

c8f0055b1d3a67b0456e5d7aa3de4700
.exe windows:4 windows x86 arch:x86

ea00a04f734b9bfad6d39137675f861c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject

shell32

SHGetSpecialFolderPathW
ShellExecuteExW

kernel32

GetCurrentProcessId
GetModuleHandleW
LoadResource
GetUserDefaultLCID
GetTickCount
TlsFree
SetEndOfFile
GetCurrentThreadId
VirtualProtect
TlsSetValue
EnumResourceNamesW
MulDiv
TlsAlloc
ExitProcess
OpenFile
LoadLibraryExA
GetVersionExA
TlsGetValue
Sleep
GetStringTypeExW

ole32

CoCreateInstance
StgOpenStorage
CoFileTimeNow
CoUninitialize
CoInitialize

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ