3004dce902e91939ae1a1dcba48b4280 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3004dce902e91939ae1a1dcba48b4280
Size

25KB
MD5

3004dce902e91939ae1a1dcba48b4280
SHA1

b268dd011a69c4cdba22136319a0dc4df92cd131
SHA256

818465b789c4b2031e097c1205fe156650c45470d4fb80daca32e1dcbd726d5b
SHA512

ff57293c4055bf228bc455e8842fecc79018833fe232c02905f42a54aaa11c066cdb11fda1122bc2e5317764a4c65cab8f0568807935b40acf9fcf38fd60ba09
SSDEEP

768:838vBoD+2NY6FeTE0sm7e32eVrBiNeGfMw:48poqUY8eTErYe32eFGelw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3004dce902e91939ae1a1dcba48b4280

Files

3004dce902e91939ae1a1dcba48b4280
.exe windows:4 windows x86 arch:x86

2f7eb7cb40902abb1343f6c7359244a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleTitleW
RemoveDirectoryA
WritePrivateProfileStringA
ExitProcess
GetLogicalDrives
ReleaseSemaphore
GetStringTypeExW
EnumResourceLanguagesW
GetProcessTimes
GetVolumePathNamesForVolumeNameW
GetSystemDefaultUILanguage
GetTempPathA
ReplaceFileW
LocalFree

user32

GetKeyboardLayout
CallMsgFilterA
CreateDesktopW
BeginDeferWindowPos
CreateWindowExW
DlgDirListComboBoxA
GetScrollBarInfo
PostThreadMessageA
wsprintfW
CharUpperW
DrawCaptionTempA
mouse_event
SystemParametersInfoW

Sections

.text
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ