8ca8fd4c9f4bddb163ebb1c94ce48ecc2e3e8ea6052b8bf098f232c68a563c6d | Triage

Sharing

General

Target

8ca8fd4c9f4bddb163ebb1c94ce48ecc2e3e8ea6052b8bf098f232c68a563c6d
Size

4.7MB
MD5

92aa5a185934c373de5c1d8d20c8bc82
SHA1

313f0635c498ebc64078078a3878c84a9a101401
SHA256

8ca8fd4c9f4bddb163ebb1c94ce48ecc2e3e8ea6052b8bf098f232c68a563c6d
SHA512

b7974f6fc328dd26558d4d25ac6023254c10b0272af2de3c10cf4b3257509ee28544812e03ebbe124867c3950bca93f95eb346a25c2562a6782417a01e79094e
SSDEEP

98304:F3Wv10cIHpT1OOEnoMbH82h6hxg0JaVw35rF7zutjdQ8f1m:de/yTInoQcGW/JaEF7zut3m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ca8fd4c9f4bddb163ebb1c94ce48ecc2e3e8ea6052b8bf098f232c68a563c6d

Files

8ca8fd4c9f4bddb163ebb1c94ce48ecc2e3e8ea6052b8bf098f232c68a563c6d
.exe windows:5 windows x86 arch:x86

f427ec01d51b9c584dcb332a494f35bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 4.1MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE