3df332fbfce7c3ce4846c95a06ca4656 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3df332fbfce7c3ce4846c95a06ca4656
Size

1.5MB
MD5

3df332fbfce7c3ce4846c95a06ca4656
SHA1

f5a6f67de8cdeb7c06453fa9881e3b670828a2d0
SHA256

e678d1467d2ca6be444ca982c67f31fd918d7692973c0b0d563b394d840ecf2b
SHA512

254c4543caa397c6ee74965923a98d2e6b1d496c9650895ea07e759b3aaffd8eee3a4eca961ac4f458db76b3cefcd4e717fa38030b2a021dc1c6e07b2bdc629f
SSDEEP

24576:YuCuIMMnMMMMM2FchyN35DtDqRSrqC5eX0TDwu8MSS09qMKe6Jpk/hZY57TedeI0:YVMMnMMMMMGIyN7DbtQXywu8MSgFuZZc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3df332fbfce7c3ce4846c95a06ca4656

Files

3df332fbfce7c3ce4846c95a06ca4656
.exe windows:4 windows x86 arch:x86

266faa31f3a2b418abc635454612fe83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

netapi32

NetDfsGetInfo

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

kernel32

FormatMessageW
GetLastError

ntdll

RtlAddAccessAllowedObjectAce
NtAllocateVirtualMemory
RtlAdjustPrivilege
RtlAddAccessAllowedAceEx

setupapi

SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsW
SetupDiEnumDeviceInfo
SetupDiCallClassInstaller
SetupDiGetClassDevsW
SetupDiCreateDeviceInfoList

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE