3f6b7c01198e647aaa4491c23389e495 | Triage

Sharing

General

Target

3f6b7c01198e647aaa4491c23389e495
Size

138KB
MD5

3f6b7c01198e647aaa4491c23389e495
SHA1

5f1bf3babbcda3187a26574ce2c94912201148c6
SHA256

8e8cff640188f72fc850660b0ca299ad6a24106e58616c03c9598f7d5a891395
SHA512

06fdbff0b51f802038e46a1a1903adf210e23603c6e5218dc21ffa808fe2a02eee8ec6cc582652d8828997558c27b62409c617403b5f64b10bed82394392662a
SSDEEP

3072:F0myqqiDm7HRRbVxU0PvcoF1ZBIdzj+57fGfS5R:3JqxDbc0tF1fIdOBUS5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f6b7c01198e647aaa4491c23389e495

Files

3f6b7c01198e647aaa4491c23389e495
.exe windows:4 windows x86 arch:x86

71f458a3392b1762de738f2a837c2b3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
GetFileAttributesA
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
CloseHandle
lstrlenA
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
VirtualQuery
GetSystemDirectoryA
SetCurrentDirectoryA
WritePrivateProfileStringA
GetFullPathNameA

user32

wvsprintfA

advapi32

CloseServiceHandle
StartServiceA
CreateServiceA
OpenSCManagerA

shell32

DragAcceptFiles

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE