8ff076d1114ddc3540f60c5b21177f70N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ff076d1114ddc3540f60c5b21177f70N.exe
Size

47KB
MD5

8ff076d1114ddc3540f60c5b21177f70
SHA1

1bbf47fcebad3a473e705ed6c3a57b62fee6b0a8
SHA256

672fc12d3c7f63724355c974e159c2f7a269a1ca28c794cda2bb039db4b440bf
SHA512

1d32b702f901fd91fbe38d7a33fdec99be86db5134247eb590deeda7409423628053be2358e621151ba3c45ce5a707acc563dcf08711ffc51c153c948c93d5ea
SSDEEP

768:DqPJtsA6C1VqahohtgVRNToV7TtRu8rM0wYVFl2g5coW58dO0xXHV2EfKYfdhNhs:DqMA6C1VqaqhtgVRNToV7TtRu8rM0wYM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ff076d1114ddc3540f60c5b21177f70N.exe

Files

8ff076d1114ddc3540f60c5b21177f70N.exe
.exe windows:4 windows x86 arch:x86

3b884b93be1eaa99038bd3acaaa5f577

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

kernel32

GetFileSize
WaitForSingleObject
CreateThread
HeapFree
DeleteFileA
ExitProcess
lstrcmpiA
lstrcatA
GetWindowsDirectoryA
HeapAlloc
GetProcessHeap
Sleep
GetModuleFileNameA
CloseHandle
GetLastError
CreateMutexA
HeapReAlloc
FindClose
FindFirstFileA
GetProcAddress
LoadLibraryA
CreateProcessA
CreateFileA
ReadFile
WriteFile
FlushFileBuffers

wininet

InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetSetOptionExA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE