3f9ead2d654a0cb9cfb494a6b9272fc6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f9ead2d654a0cb9cfb494a6b9272fc6
Size

9KB
MD5

3f9ead2d654a0cb9cfb494a6b9272fc6
SHA1

4480999ad8d2ac68ee708f6d4b61e8000bbdb009
SHA256

e72d3f86578b5719a36d295bf483c2751920103e36b1a6d0951cc3f71102820f
SHA512

cde29891f8785103a54985abf8d863e566ad616e5874b1ebea6a40823fedbf97d11349e4c7e9e9f1e719573d07e3d28da5b6e040373e050e3a89dc9231d1374e
SSDEEP

192:7iHiBYN8PsY+XeJs+ET5usjt5XnGx2CrtCrEkZBTbeU:cX77usjt5WIChC4kZB3e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f9ead2d654a0cb9cfb494a6b9272fc6

Files

3f9ead2d654a0cb9cfb494a6b9272fc6
.exe windows:4 windows x86 arch:x86

8151e3117ea04e16659a825cecdb8380

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCreateKeyA
RegSetValueExA

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
GetWindowsDirectoryA
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
lstrcpyA

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
memset
signal
sprintf
strcat
strcpy
strlen
strstr
system

user32

MessageBoxA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 62.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE