3dcc222dc0d09c7502e408bbb26d1dae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dcc222dc0d09c7502e408bbb26d1dae
Size

145KB
MD5

3dcc222dc0d09c7502e408bbb26d1dae
SHA1

53fce92b14246b58977e840bf4deade173feccee
SHA256

7dec5b4ce516bbb7a58a162a871b488864f9c355faea5153e339bd67dce03070
SHA512

e2aa7e0823c87d9f07bbef346fc004ef95fad3f7d25d9e65a0dca32581dcb6f7c60711feb1c6a7c4c4f0966e27d14cc9d3d7d2fbebba78dbe43a8447996e5273
SSDEEP

3072:pzxMNtQ/rEwSQq7L+M9aSbUOixe7ojGtVE6qfLjN4SLMCiENE:pzxBgQq7L+CTjojGto54SLMJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dcc222dc0d09c7502e408bbb26d1dae

Files

3dcc222dc0d09c7502e408bbb26d1dae
.exe windows:4 windows x86 arch:x86

738a80494ce5bdad19dab14ea672431e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCurrentProcess
PulseEvent
VirtualProtectEx
ExitProcess

user32

DestroyCaret
GetActiveWindow
GetWindowLongW

ntdll

NtReadFile

Exports

Exports

SetKbkdowo

Sections

.edata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.jthftz
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bygshq
Size: 137KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ