3d97b4d5463fca90a8c7355b00e81896 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d97b4d5463fca90a8c7355b00e81896
Size

98KB
MD5

3d97b4d5463fca90a8c7355b00e81896
SHA1

b9bd430a0d5f9ef443ee0cac76e9f7486bc16ded
SHA256

3c496effb9ef01272a26c82a3880d123d46f0be8a6f63d17c4e8a22dbbdb1b42
SHA512

834029f8d1cb24c8fad2a99137c1e7f73b53e6f984fa803f1691c304a16e8784200568af6b01f5ac5607808ce773ba83d5d52d1f393986ba9588a56669ff9814
SSDEEP

1536:pdwL+rBVoqTLKRqHlMIlc+JSybYuzkGffTwtG4ESoF5w9H4aQUGFNZAesNoiW4m3:3kH5qrNFQGsMbp7w9HbQuNoi3a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d97b4d5463fca90a8c7355b00e81896

Files

3d97b4d5463fca90a8c7355b00e81896
.exe windows:4 windows x86 arch:x86

d5f9d10594a27362b462ff005e74b817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderLocation
DragQueryFileA

kernel32

GetModuleHandleA
ExitProcess
GetEnvironmentStrings
GlobalAlloc
CreateFileA
GetFileAttributesA
DeleteCriticalSection
GetDiskFreeSpaceA
CreateEventA
VirtualAlloc
ReadFile
GetFullPathNameA
MulDiv
RaiseException
LockResource
CreateThread
LoadLibraryExA
MoveFileA
WriteFile
GetVersionExA
lstrlenA
GetUserDefaultLCID
LoadLibraryA

user32

GetActiveWindow
IsRectEmpty
IsWindow
GetMenu
IsIconic
IsCharLowerA
LoadIconA
IsWindowEnabled
IsDialogMessageA

shlwapi

PathFileExistsA
SHStrDupA
SHDeleteValueA
SHGetValueA

Exports

Exports

EeZEBf6T@12

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ndata
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ