c8fe038aee8af4e4c539b1a28448b01f1a3c461e40c68950101fec536e92220e | Triage

Sharing

General

Target

c8fe038aee8af4e4c539b1a28448b01f1a3c461e40c68950101fec536e92220e
Size

484KB
MD5

c25f5b52ad5bd8e69a74fdfb4378cf1a
SHA1

8b06e0738bfc21b1b921941cc6603ed524c8e9e6
SHA256

c8fe038aee8af4e4c539b1a28448b01f1a3c461e40c68950101fec536e92220e
SHA512

e48aeb43611ccd30ddfc60ef1d1559d25522ff166e327d27fb4314599aec2ed656c4f0415f544fb593fea946bd2510805e4cb30ca8c9f0b1ecd97e9f9b7c861e
SSDEEP

12288:IvWWuLHuC9j9Z8EfC1PmUGP4cEzb3Rq8KJqD:CTuLHuEZ88kmUGgckb3R7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8fe038aee8af4e4c539b1a28448b01f1a3c461e40c68950101fec536e92220e

Files

c8fe038aee8af4e4c539b1a28448b01f1a3c461e40c68950101fec536e92220e
.exe windows:4 windows x86 arch:x86

34b0bf9b4e145d9e9a2721c3578b8b4a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtQueryMutant

kernel32

GetCurrentThread
GetCommandLineW
CreateActCtxA

user32

GetMessageTime

Sections

.text
Size: 481KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 383B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE