3189c6a4961818df45f76b4fa68f8a8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3189c6a4961818df45f76b4fa68f8a8a
Size

103KB
MD5

3189c6a4961818df45f76b4fa68f8a8a
SHA1

62f458c6f44dd6831ad9c39c899337d3d906fef3
SHA256

7f61c1c3916d49cd46f8d3816b1d3a3be4e922c9d121d13deca23b8f364f361b
SHA512

7274cd237ed22616b026ae70731481988e93b6d299a713a5a6e2655fa789b3e0da35f12dab8ba59423c2d721695886cb718c7185c58c8af94b484d05fe6f6c87
SSDEEP

1536:xW39Hoae3JxRwtCVwvNKH2hBrV6Viz1AD4LPw9mL3yQLylo:xW3ZVe5Itg7WhBhwD2Weyg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3189c6a4961818df45f76b4fa68f8a8a

Files

3189c6a4961818df45f76b4fa68f8a8a
.exe windows:4 windows x86 arch:x86

1573069c27ae29728bd1a5f0778a5521

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetFileAttributesW
ReleaseMutex
GetCommandLineW
GetModuleHandleA
LocalFree
FindAtomW
GetTickCount
GetComputerNameA
CloseHandle
SetEvent
CreateFileA
GetDiskFreeSpaceW
SetLastError
lstrcmpiW
ResumeThread
CreateThread
GetSystemTime
ResetEvent
HeapCreate

user32

GetComboBoxInfo
DestroyCaret
GetDlgItem
GetKeyState
GetClipCursor
GetClassInfoA
DrawStateA
SetFocus
CreateWindowExA
CallWindowProcA
DispatchMessageA
FillRect
CloseWindow
MessageBoxA

cryptdlg

CertConfigureTrustA
CertTrustInit
CertTrustCertPolicy
CertTrustFinalPolicy
DecodeRecipientID

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE