b3f6cd2546dbcfa5088a1f3d8bc0ef1d9d4cb2d177dd5346b0c5ece0df1c8551 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3f6cd2546dbcfa5088a1f3d8bc0ef1d9d4cb2d177dd5346b0c5ece0df1c8551
Size

196KB
MD5

ba4be4921640112ab325a1447a45e6ff
SHA1

7604ae7c4a8c3b8303650b4f94eb8a76aa72d40b
SHA256

b3f6cd2546dbcfa5088a1f3d8bc0ef1d9d4cb2d177dd5346b0c5ece0df1c8551
SHA512

491015bf74172ca8b47317c29cccf5efa85bd657da12e55f6788c0b37af0265df16e39330ec8910cf21998981a5812efd70315349cbec2967e745782f0ba05cf
SSDEEP

384:LQQ12DE1b7Av7L0L872gjuOBFSRyWCRlNWXpYuZwL//BVbvyzJt67f2JddVm8qJP:srA1m7tDiRAWZGHBJo6Mk5mptUb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3f6cd2546dbcfa5088a1f3d8bc0ef1d9d4cb2d177dd5346b0c5ece0df1c8551

Files

b3f6cd2546dbcfa5088a1f3d8bc0ef1d9d4cb2d177dd5346b0c5ece0df1c8551
.exe windows:4 windows x86

13ab381dacef214bd7c905ade17ea0aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
lstrlenA
WriteFile
CreateFileA
FindResourceA
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetOEMCP
GetACP
GetCPInfo
ReadFile
MultiByteToWideChar
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
FlushFileBuffers
SetFilePointer
GetStdHandle
WideCharToMultiByte
GetModuleFileNameA
VirtualFree
VirtualAlloc
HeapReAlloc
SetStdHandle
GetStringTypeW

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
_onexit
__dllonexit
_CxxThrowException
_CIpow
__CxxFrameHandler
??2@YAPAXI@Z

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ