a8f6e6c7691cfc8e8647d2a5f23c6ac517fb7bc6c7773a14e79fd0aa0558850d | Triage

Sharing

General

Target

a8f6e6c7691cfc8e8647d2a5f23c6ac517fb7bc6c7773a14e79fd0aa0558850d
Size

63KB
MD5

478d5b75c85fabeb1943d5a6acda28b4
SHA1

a1f312b3ae32e890445ddb12e3fb0c4e03fe3c97
SHA256

a8f6e6c7691cfc8e8647d2a5f23c6ac517fb7bc6c7773a14e79fd0aa0558850d
SHA512

18686c52d6f200b0f1baf55123efc0c42ef90e3466c38123b3c84aede107fab5f47f174baf9903f0690cde2c0090678b28fd57e8626660c14d26bd3a5b2dc000
SSDEEP

1536:I8TfsooiOY05Za1EjJAJ2XoyezjWwzmP/5uk/YGrb8W2CL:uo1tEjJtQhzm35uOfv2CL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8f6e6c7691cfc8e8647d2a5f23c6ac517fb7bc6c7773a14e79fd0aa0558850d

Files

a8f6e6c7691cfc8e8647d2a5f23c6ac517fb7bc6c7773a14e79fd0aa0558850d
.exe windows:4 windows x86 arch:x86

2fe81b126b05eafe17d51fff01ad134f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TermsrvGetWindowsDirectoryA
InterlockedExchangeAdd
CreateProcessW
ConnectNamedPipe
UpdateResourceA
RegUnLoadKeyW
SystemTimeToTzSpecificLocalTimeEx
RegCopyTreeW
CreateSymbolicLinkW
RegLoadMUIStringW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE