3dde9de4b956b3e70bd6a65695d74cc4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dde9de4b956b3e70bd6a65695d74cc4
Size

62KB
MD5

3dde9de4b956b3e70bd6a65695d74cc4
SHA1

49230b8409d7f087872b49df713befbe515757fa
SHA256

23e1516f934557aee76ece4176476d4577d276db52dae4431d5c390631f29f9d
SHA512

2d9a33ab85f4e9c611fc8fad46914eabf4bf37cbc3b552f5d1855622822c32c3a3941fc5cd40804e97f0122f763295af07ec5e817b78e5448d790d63fea88c9c
SSDEEP

1536:PI7dUQlJ734MkO6ubJL6tExKlP5QSr8tXAmm9YwT83e1W0+:CUa73sLuUExG9Yk83e1W0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dde9de4b956b3e70bd6a65695d74cc4

Files

3dde9de4b956b3e70bd6a65695d74cc4
.exe windows:4 windows x86 arch:x86

6a84a7e37b717dee36ac538d3d88ffed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfoExA
CreateMemoryResourceNotification
FreeEnvironmentStringsW
WriteProfileStringA
ConsoleMenuControl
HeapSummary
TransactNamedPipe
FindActCtxSectionGuid
GetConsoleCommandHistoryW
GetExpandedNameA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE