3de82388a6e799446bada69b6a08dc9e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3de82388a6e799446bada69b6a08dc9e
Size

2KB
MD5

3de82388a6e799446bada69b6a08dc9e
SHA1

1611a6f27610cd87641b52a508d2b3f77f3306ad
SHA256

e8acb5f20e24ae01c652e291bc2202c9fa0ef198fc19c56b25189f50e62966c2
SHA512

569d48565a9359e1146822d7a68390901ace704c6c702b6ba471092232bdb72a1d694ce5aec6646256ea852b99695bfc33136609d7aac78690eaf77e317350ae

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3de82388a6e799446bada69b6a08dc9e

Files

3de82388a6e799446bada69b6a08dc9e
.exe windows:4 windows x86 arch:x86

4766e72c51a09e2003a8439727f42ad5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
WaitForSingleObject
GetLastError
GetProcAddress
HeapFree
GetProcessHeap
GetCommandLineA
lstrlenA
CreateProcessA
CloseHandle
GetModuleHandleW
HeapAlloc

advapi32

RegOpenKeyExA
RegCloseKey
RegDeleteValueA

Sections

.text
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ