8b5fded525d763a2c70de34287061097ce2dd8556ede4b5f23b3b284cbaeb900 | Triage

Sharing

General

Target

8b5fded525d763a2c70de34287061097ce2dd8556ede4b5f23b3b284cbaeb900
Size

212KB
MD5

1544d5810d3647ab477d1d198e1e7e6b
SHA1

aea94307f59a972abd630ad9786b1a3951161c0f
SHA256

8b5fded525d763a2c70de34287061097ce2dd8556ede4b5f23b3b284cbaeb900
SHA512

26b59cbec5c65877d410f38935bce9b0ff1bd42b02589fbabce2cff1ad9c6af15fa743e72c584002570cbadb30ade5f949157050e444ef57ab6bb97942b5f8af
SSDEEP

6144:BESeWo3N9TA1vTPGecsj+OQtugp89r9u98:jPGoBQtuA8Zw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b5fded525d763a2c70de34287061097ce2dd8556ede4b5f23b3b284cbaeb900

Files

8b5fded525d763a2c70de34287061097ce2dd8556ede4b5f23b3b284cbaeb900
.exe windows:4 windows x86 arch:x86

44ff0a852b40289ff2085cc27e8d026a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
SetCurrentDirectoryW
GetModuleFileNameW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
RaiseException
GetLastError
LoadLibraryA

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ