cf8d4798baec65113dab7c4b195fff33adc732dba2de9951195bcb06115eb034 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf8d4798baec65113dab7c4b195fff33adc732dba2de9951195bcb06115eb034
Size

66KB
MD5

49fbfdd2a04dbf9c0c4550d0bb4763e3
SHA1

d9d5ed726dd707da03ba6edfb4bd8e73e53599ba
SHA256

cf8d4798baec65113dab7c4b195fff33adc732dba2de9951195bcb06115eb034
SHA512

12dcfce9b2d2fe6d9706d8cf042ef94b5201949314dda266b1dfc9e0f4673431f1757ff3366cb759650fce28e104c3dda7b6ccb2379874f6c58f668b471e3382
SSDEEP

1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXic:IeklMMYJhqezw/pXzH9ic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf8d4798baec65113dab7c4b195fff33adc732dba2de9951195bcb06115eb034

Files

cf8d4798baec65113dab7c4b195fff33adc732dba2de9951195bcb06115eb034
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 50KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE