3d9860ae8b0965deac30d82fd2581a4a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d9860ae8b0965deac30d82fd2581a4a
Size

131KB
MD5

3d9860ae8b0965deac30d82fd2581a4a
SHA1

1f5c1c99c94a2a4af009f05da7113bce662f3357
SHA256

05dae8641449f15b323172c76f1fd55ab8e7f83d298e59baec4ba3ccc3053107
SHA512

281ebefcbfce284cdb42acee363df4df5bde9fc882f9dad7a0456c61ca9fece785c6ac2a62470233a96ce20e81227177520c9aa8d010910324eb312cfd0e377e
SSDEEP

3072:G8FjHqb8yXnLhwUFxIg9cKeRT9uZwuz5S3kOe:G8ViHLYg+KETcMR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d9860ae8b0965deac30d82fd2581a4a

Files

3d9860ae8b0965deac30d82fd2581a4a
.exe windows:4 windows x86 arch:x86

90606bc84bc0ef222dc90132ad402a79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
SetLastError
TlsGetValue
CreateFileA
GetModuleHandleA
GetStdHandle
IsBadCodePtr
CreateFileMappingA
SetEvent
HeapDestroy
GetCommandLineW
ReleaseMutex
GetModuleFileNameA
ResetEvent
TlsAlloc
GetEnvironmentVariableA
GetACP
GetFileAttributesW
HeapCreate
lstrlenA

user32

DestroyMenu
DispatchMessageA
GetWindowLongA
DrawTextW
DispatchMessageA
FindWindowA
IsZoomed
GetClassInfoA
PeekMessageA
CallWindowProcW
IsWindow
GetSysColor
CreateIcon

stclient

DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow

timedate.cpl

CPlApplet

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE