8c6e764d8610f5143adea6e84e671c63b10d6eca15089ecab5945f52e08307baN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c6e764d8610f5143adea6e84e671c63b10d6eca15089ecab5945f52e08307baN
Size

2KB
MD5

fddd74e1aec5acba67a02384925f1b60
SHA1

979836ff9f4fbde6fdd684ec405aa8d1dcbc894c
SHA256

8c6e764d8610f5143adea6e84e671c63b10d6eca15089ecab5945f52e08307ba
SHA512

6a512cb9cfd4212c32984aef307d6e7110b8924332dde842a28abd95f3ab279eb4d77a302b731b1b90d8b69a80298d36ef326c0f0aace34ab14b66b5c26c1b82

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c6e764d8610f5143adea6e84e671c63b10d6eca15089ecab5945f52e08307baN

Files

8c6e764d8610f5143adea6e84e671c63b10d6eca15089ecab5945f52e08307baN
.exe windows:4 windows x86 arch:x86

3746289c4eaccde50b67772f5be2fb9e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetModuleFileNameA
GetModuleHandleA
QueueUserAPC
SleepEx
TerminateProcess
CreateThread

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ