3f6060246b2968332710e325bc100047 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f6060246b2968332710e325bc100047
Size

22KB
MD5

3f6060246b2968332710e325bc100047
SHA1

4b1ded31f8c9b571a7117acc6f00a94fa2e522d8
SHA256

3a6796131b41a1e81887cdf03d08c8f95523560bba85a16cfc46741bc8ac804b
SHA512

cafc79408fbafb1d4bf946d9433b8ce2637cb12131d270f787ba4c368136e48261e79056631f9cabdcc183e5fc56b58cad03d026b316b1bf5bc5ac1b9a7763f1
SSDEEP

384:ecnE0N9TugdeVfaO+BWVHcufg/1uR07MGLfBGmFRRZYcfH6kLmU:ecnHN9T9eBgWVHcufs8+7zVGa1Y8vLmU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f6060246b2968332710e325bc100047

Files

3f6060246b2968332710e325bc100047
.exe windows:4 windows x86 arch:x86

f13fa1a1394daf4bb47d46dbdf83dce8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasEnumConnectionsA

kernel32

GetFileSize
GetLastError
GetModuleFileNameA
GetStartupInfoA
ExitProcess
GetCommandLineA
CloseHandle
SetEndOfFile
WriteFile
SetFilePointer
GetTempPathA
GetProcessHeap
WideCharToMultiByte
GetThreadLocale
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetLocalTime
GetWindowsDirectoryA
GetCurrentProcess
TerminateProcess
lstrlenA
LoadLibraryA
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
CreateProcessA
GetSystemDefaultLCID
RtlUnwind

user32

CharNextA

advapi32

RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA

ole32

StringFromCLSID
CoCreateGuid

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ