8d15849757e35a7aabeaad1d22c9e36dc354aa0546b678e1f1654ef8647db36f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d15849757e35a7aabeaad1d22c9e36dc354aa0546b678e1f1654ef8647db36f
Size

321KB
MD5

1200cdba18bfba92681ba257a2d98d9e
SHA1

bd1746a2526cb0da48aace82921407ce948e71af
SHA256

8d15849757e35a7aabeaad1d22c9e36dc354aa0546b678e1f1654ef8647db36f
SHA512

d91449dbe2ee63b3acb7e31601925a85c8e48b24cc0785669862e57146daa94e622c625300ebce9452a53ff44cc56968283d58f02d8b1ad2b2ed9acc95740842
SSDEEP

1536:NVLAYk5h+GwXIYr11xZcVqc9RP+8ra3Owgl0U3Tg/sXuDcM0ZYKc88OuaVitc8g0:z8z5x9tH3vzgyr6LxjVs4WEhC3A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d15849757e35a7aabeaad1d22c9e36dc354aa0546b678e1f1654ef8647db36f

Files

8d15849757e35a7aabeaad1d22c9e36dc354aa0546b678e1f1654ef8647db36f
.exe windows:6 windows x64 arch:x64

0cd54190d78df14f09705ad3e001d540

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
SetCriticalSectionSpinCount
GetCurrentProcessId
CreateRemoteThread
OpenProcess
VirtualAllocEx
WriteProcessMemory
MultiByteToWideChar
ConvertDefaultLocale

user32

IsWindowVisible
GetWindowContextHelpId
MessageBoxA
GetWindowLongPtrW
IsDialogMessageW
RegisterClassW

Sections

.text
Size: 1024B - Virtual size: 767B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ