8iiiio[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8iiiio.exe
Size

12.6MB
MD5

04232ec7889db2061b681c8a2b6694aa
SHA1

a9601f3e26235bb241234f4b5d51e759840ed6a0
SHA256

13ae149b59bbacd0a46a81e4dd57f43c5639c5fa5f93823fe04912987b253e29
SHA512

54f6f97da63ae4dd1f5f71ed546b6ade7ec0a979a3420164eda53d5664b4113bae7124a7f62cff679f9bb1edc2782442039b82c8750c095b2db52936a7ce8551
SSDEEP

196608:srbcQWb8flBdmik3Hpwi+NXr6FIPha0ejJswUUSPlwnDviL42BOkn5ZFzP6D:sYb8Hd/k3HSrDA0oOUWlwnDvMEcZFuD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8iiiio.exe

Files

8iiiio.exe
.exe windows:5 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 2.7MB - Virtual size: 6.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.detour
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 9.1MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE