3b2f60a703da1de3a6450f915a627582448bb0a3caf078edf8d97a58a09f9907 | Triage

Sharing

General

Target

3b2f60a703da1de3a6450f915a627582448bb0a3caf078edf8d97a58a09f9907
Size

5KB
MD5

3bf907cd0ed46fac3753b0a1e922176c
SHA1

9c5c5258e45e53baed8934c2dac5d6b3f415370b
SHA256

3b2f60a703da1de3a6450f915a627582448bb0a3caf078edf8d97a58a09f9907
SHA512

93059cf77b05f862af9f1bae564c5843bb4ca2279c2118455c665da8c6a9d9324b271412328d770cc0df4cfacfecdc22ec098fb745cd11a158b628fbb78a7978
SSDEEP

96:qNtHvdXYDjGEEUAnbVgOMTrj4YBJJJXor1:qvvdXmKEEPbVgOOd3tor1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b2f60a703da1de3a6450f915a627582448bb0a3caf078edf8d97a58a09f9907

Files

3b2f60a703da1de3a6450f915a627582448bb0a3caf078edf8d97a58a09f9907
.exe windows:4 windows x64

3d944b59e5b07797355ec6c12a320893

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOidCpy
SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilOidNCmp
SnmpUtilOctetsNCmp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ