3f8d58cef04bccbcd4006ae13e6a64b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f8d58cef04bccbcd4006ae13e6a64b5
Size

756KB
MD5

3f8d58cef04bccbcd4006ae13e6a64b5
SHA1

f1b3432dbdb9998c9393ddcbf51cf1c4e9471652
SHA256

c3563ac02a3b56c07a14cfbc6f2c5be97261c7f62c2580f082e821ebe44e456d
SHA512

669cfb23248b0eea546a23e8ec31b464cb6716de125125b2c6ebd376b4a341fe9a543a4fa4c6cf90cdaf2df8834c289d42fefa59b8694b32ba583c9f0217ad9f
SSDEEP

12288:49Dk4bzl3/jQ5nJlUwILLkI4OMey43IIOk7/qjpBPkWklQV1XzAVyw5/DUak9+fe:ok4bJwbU5MfinOk7sDkWZVVM1JDUaG+m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f8d58cef04bccbcd4006ae13e6a64b5

Files

3f8d58cef04bccbcd4006ae13e6a64b5
.exe windows:4 windows x86 arch:x86

c43b9f0fb687c8910d4a3bf2b0b78f8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
HeapFree
RtlUnwind
LCMapStringA
HeapDestroy

user32

wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegSetValueA

ole32

OleRun
CoInitializeEx
CoCreateInstanceEx
CoRegisterClassObject

Sections

.text
Size: 106KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 554KB - Virtual size: 791KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 26KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE