8f2b12d6dcc08083527e1c7a4f3a409ebaa25eaf5ca2e40d907961260a7002e0N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f2b12d6dcc08083527e1c7a4f3a409ebaa25eaf5ca2e40d907961260a7002e0N
Size

66KB
MD5

a0ee2de9366fa0ccf0c9b051cc56c390
SHA1

086be35556706d5038431b1d3e8c691c76d95a31
SHA256

8f2b12d6dcc08083527e1c7a4f3a409ebaa25eaf5ca2e40d907961260a7002e0
SHA512

dccf200bb8803ce69da2828038a886c85b227c6a02f9b7c8f3e10bf1d38d665a6fe51e997bc6872291d4abd07025a9fc46695b8917415a64d9af7ad89f29f464
SSDEEP

1536:EwovSYRFSUvslbYo7iwOQ7De+TFrOuesghpjx8YIZ8:JolLvTo7tOj+TFrOughpj0Z8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f2b12d6dcc08083527e1c7a4f3a409ebaa25eaf5ca2e40d907961260a7002e0N

Files

8f2b12d6dcc08083527e1c7a4f3a409ebaa25eaf5ca2e40d907961260a7002e0N
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE