3da380b64104205e37d0c568fcd7108b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3da380b64104205e37d0c568fcd7108b
Size

14KB
MD5

3da380b64104205e37d0c568fcd7108b
SHA1

22ae51df0702daeee3df5cc410ff44b8d52a3204
SHA256

e5efe6bec163e3ce52a631aa045629a10e90f1bc0e643c33cfc8daf9b935a8c8
SHA512

e3b5c5a424439da90e381d7a34e4dce18dbc67c336122b63379de7b733e4c70840ee62cf2551088f444efda2d8850deb67ab41ea5734a5a47777322314d82a60
SSDEEP

192:i9Ujip5iYMFF3ijZxambZkhRM/oqd3Az9xxNCukFx+ND8AvF6ev:i9Uji211ijZxaml5r3Nx+TvY8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da380b64104205e37d0c568fcd7108b

Files

3da380b64104205e37d0c568fcd7108b
.exe windows:4 windows x86 arch:x86

3daa69c2a676ed1deca98497fbe4f644

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep

user32

KillTimer
SetTimer
TranslateMessage
GetMessageA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256B - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE