8ebd7496a9c965641c5f9dd3197d92c87e73b39fa7f72a9f83fea273132a07f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ebd7496a9c965641c5f9dd3197d92c87e73b39fa7f72a9f83fea273132a07f4
Size

47KB
MD5

976b1c8a17fdac003a7a75cddfc53010
SHA1

f63a1612bbaa4dea50b0982fab36bb2258a3beb9
SHA256

8ebd7496a9c965641c5f9dd3197d92c87e73b39fa7f72a9f83fea273132a07f4
SHA512

3476d0219cdf0f4f0f3212e5cbf6ad6abd2dd1f8236f8ef041eb2dc9f8a11259e839077feb16e9679171e5f6f3706c954531247f89cf7981e42149413d9b017e
SSDEEP

768:2PitRNEGtXXnZ/JudBDtcUtdVCxVOS3fNGq5hk:RF3wDtkx3P5+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ebd7496a9c965641c5f9dd3197d92c87e73b39fa7f72a9f83fea273132a07f4

Files

8ebd7496a9c965641c5f9dd3197d92c87e73b39fa7f72a9f83fea273132a07f4
.exe windows:5 windows x86 arch:x86

32ea2988a92c31a9efd5b936dc243a44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord13

mscms

GetColorDirectoryW

kernel32

GetLastError
ExitProcess
GetModuleHandleW

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ