3e7ca7938da42158b6b108be35e6aa47 | Triage

Sharing

General

Target

3e7ca7938da42158b6b108be35e6aa47
Size

191KB
MD5

3e7ca7938da42158b6b108be35e6aa47
SHA1

c2b3d01d2e3216373b2b22f4cdf79349cda01f20
SHA256

7df6a939040186090a0797aaeb2175b80c7873aa92b067ff6e4ff149316f20fa
SHA512

20c7b5c8d5b0521a13f118ffa0f5326f39d6ad9818d94954a80892a3be2fd62a5b7ec02a1351b1d2548ceb53d914fbeba13e5f73906640603614f64afb8f3a69
SSDEEP

3072:cNJNvpZqpC1nilALv4SGXiImoe8Nwygv1Hn8hpHOzw0TkRrSYuakV+2Bs5kyy855:qNvpZlFwAkSGS5ZXJR8hEz0BSsV2Bs5v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e7ca7938da42158b6b108be35e6aa47

Files

3e7ca7938da42158b6b108be35e6aa47
.exe windows:4 windows x86 arch:x86

29b6b79d4b955baf0c1b8c9f1156680f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED

Imports

gdi32

SetRelAbs
StretchBlt
SetICMMode
ResetDCW
UpdateColors
SaveDC
TextOutW
SetDIBColorTable

wsock32

bind
WSAStartup
listen

kernel32

CreatePipe
TerminateProcess
VirtualProtect

shell32

SHAppBarMessage
StrRChrIA
StrStrIA

Sections

.text
Size: 31KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ