3d0bb270bcbdaaf14246f10d26d19afc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d0bb270bcbdaaf14246f10d26d19afc
Size

128KB
MD5

3d0bb270bcbdaaf14246f10d26d19afc
SHA1

bebc2cfc0f15c16901eb0f9fafeba11c9e2afcf3
SHA256

f5cfc10079ab8587b32fab0ef83a54559a8fccb804ce1dca9f8d8847a0ed35d1
SHA512

80f6929c694973fc281b828a699bad02b026ecf8e0e8fb34f6850c95c29ae6b7db62c4270a1f9be940fbdb5462b03367239256417548d1cb4dd99d718983a7b1
SSDEEP

3072:4FfKK7r2S4izIoNLBdY2HLLDrSor2S4izIoNLBd:4hKKX3jIMYWPek3jIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d0bb270bcbdaaf14246f10d26d19afc

Files

3d0bb270bcbdaaf14246f10d26d19afc
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ