3d604f49492816df67b2989e9480a0a5093916128edb965a5eede47786be36fe[.]exe[.]000 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d604f49492816df67b2989e9480a0a5093916128edb965a5eede47786be36fe.exe.000
Size

428KB
MD5

8e92e75c21c100386e0ecc3223e9202a
SHA1

f3efeaec8e058f0b3309e8a581b0123b1f2c900f
SHA256

3d604f49492816df67b2989e9480a0a5093916128edb965a5eede47786be36fe
SHA512

4d707939e23ee997e8b4dc1f5502448b5471696e17a1130b66c52a04e4c8ff5f8bb9f94372df1ee7c8266b6f00f5f9744a1ee3bfc540de096dee317c466b9c78
SSDEEP

6144:FBLsQOROeBXv7Nvi7Jjs9ysdQq29zZUPTukv2QvjXif+KdcBTDHhLPuL0GMFb98D:FN3NuhvWs9ysSqwq3i+JNHhzuIGMR9s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d604f49492816df67b2989e9480a0a5093916128edb965a5eede47786be36fe.exe.000

Files

3d604f49492816df67b2989e9480a0a5093916128edb965a5eede47786be36fe.exe.000
.exe windows:1 windows x86

20b981f15450e82a02ac450bbbcc5579

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

StgIsStorageFile

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

comdlg32

GetSaveFileNameA

wsock32

WSACleanup

winmm

waveOutWrite

msacm32

acmStreamUnprepareHeader

Sections

CODE
Size: 397KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE