3f6bb485593fff7e3ebe4da325480645 | Triage

Sharing

General

Target

3f6bb485593fff7e3ebe4da325480645
Size

484KB
MD5

3f6bb485593fff7e3ebe4da325480645
SHA1

8038f98a4ee01df1a4e431aec072046d7419e32e
SHA256

3a0005cd806895a0458756fabe19bba96e248282523b39d746228c171593fdc9
SHA512

7176b22c20595c0b1fdc84cad1a9f69b0beb08ec9799e7500b8d6c25730d613f2433cccf31cf666ece752197ad15f6bc4f9fc8c090faa9ee25896e12f6e72dd8
SSDEEP

12288:ITYEnyIpo0d1l0OF3O0wg6/hG6NoB+l3lP/gOn:RuXNAM+0O/JmUFZ/n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f6bb485593fff7e3ebe4da325480645

Files

3f6bb485593fff7e3ebe4da325480645
.exe windows:4 windows x86 arch:x86

7c8fc5459847e80a2277abb971864efe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VarUI1FromStr

ntdll

RtlReleaseMemoryStream
ZwSetSystemEnvironmentValue

kernel32

GetCurrentThreadId
SetFileShortNameA

user32

GetDoubleClickTime

Sections

.text
Size: 475KB - Virtual size: 476KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 311B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE