8b02e27f58c9261f550f0fae24e25fab4c3817e69747ae6f6e6527752583101f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b02e27f58c9261f550f0fae24e25fab4c3817e69747ae6f6e6527752583101f
Size

248KB
MD5

87532aa3f0ff1b6fc23ab63fac0cb9d9
SHA1

075111e54cde2524696610a7737e7287cb29869f
SHA256

8b02e27f58c9261f550f0fae24e25fab4c3817e69747ae6f6e6527752583101f
SHA512

7d8e651b1895decce854bba0aa7c1a11c8e643c728ec16ea27cd0278d897ff5d5f38f1a4908bc30160ee5a0f3352f29d40bfee5bc41556f68574360912ec805e
SSDEEP

6144:UYnMUfiUA0vsJ6CuFC94i7lp1LjjsG6FVng/4+rRW:UDUBPZCP9H6zngw+r0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b02e27f58c9261f550f0fae24e25fab4c3817e69747ae6f6e6527752583101f

Files

8b02e27f58c9261f550f0fae24e25fab4c3817e69747ae6f6e6527752583101f
.exe windows:5 windows x86 arch:x86

18c89e2ec0a399c68eaedd6551ce71fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE