8ffb5153e664aef349275f3bab639b6f1ae6b7ac1d15afe369150a1c5729e8c3 | Triage

Sharing

General

Target

8ffb5153e664aef349275f3bab639b6f1ae6b7ac1d15afe369150a1c5729e8c3
Size

40KB
MD5

234840d65ecdeebc02ac399ebfd683e7
SHA1

634eb8e388039a696bc4d66107acf2670b7abd49
SHA256

8ffb5153e664aef349275f3bab639b6f1ae6b7ac1d15afe369150a1c5729e8c3
SHA512

60d26a5d62a6a506d5f6a78201bb3ed11d1fd9c05226a2e46f3629d91ee6c583e98a843e014ecd96b9011ef5db037a9a418942d1f7f263596bd49a2862c26908
SSDEEP

768:HnaDlDPAh4ECqkNdzhWayVY2EEM7UpeoaJRL1vZI:HnaDih4FZfz1yZElwp9aD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ffb5153e664aef349275f3bab639b6f1ae6b7ac1d15afe369150a1c5729e8c3

Files

8ffb5153e664aef349275f3bab639b6f1ae6b7ac1d15afe369150a1c5729e8c3
.dll windows:4 windows x86 arch:x86

736cfba416191136f7480bb205b9298f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord540
ord1168
ord1253
ord342
ord823
ord1182
ord845
ord465
ord852
ord1200
ord1205
ord1572
ord434
ord535
ord5575
ord2141
ord839
ord433
ord464
ord1656
ord857
ord3663
ord858
ord2820
ord2614
ord3811
ord800
ord825
ord4033

msvcrt

free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
_mbscmp
__CxxFrameHandler

kernel32

MultiByteToWideChar
lstrlenA

oleaut32

SysAllocString
VariantClear

Exports

Exports

DeleteClass
GetClass

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ