8bd14eb00872dcc0898f26e45e23a2dd37e6400c9c9410eee6f508156ccdaed1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bd14eb00872dcc0898f26e45e23a2dd37e6400c9c9410eee6f508156ccdaed1
Size

2.0MB
MD5

e6f4be020257b5ab5f331ce9adb448a9
SHA1

f7edc677bf36ce8095958c4eb7ea96de04309b2b
SHA256

8bd14eb00872dcc0898f26e45e23a2dd37e6400c9c9410eee6f508156ccdaed1
SHA512

242fbda70b6408c13fc666d4c49e541347954fd8be550b3005bd6c6bca48247354352ec90422de080a1505e82a3cdc64e29d7112bc0073f4375219faa867c110
SSDEEP

49152:ocq/mhGE8cRktC2Mpqnl9eOc1QvxrJBqJXe30WrzzlK34oyoa1RZu7kO:oT/mhGENRZ28qnl9eOkyoTWrc4ohWuoO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bd14eb00872dcc0898f26e45e23a2dd37e6400c9c9410eee6f508156ccdaed1

Files

8bd14eb00872dcc0898f26e45e23a2dd37e6400c9c9410eee6f508156ccdaed1
.dll windows:5 windows x86 arch:x86

b877b3feb2a4a53fddd83f30e984edb7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

oleaut32

GetRecordInfoFromGuids

gdi32

SetDCPenColor

user32

SetMessageExtraInfo
SetForegroundWindow

kernel32

OutputDebugStringA
GetModuleHandleW
SetPriorityClass
AreFileApisANSI
GetStringTypeA
GetModuleHandleA

mprapi

MprConfigTransportCreate

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 1004KB - Virtual size: 1000KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 44B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 892KB - Virtual size: 890KB

IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ