3080583e1e22af32e24124d7421d446a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3080583e1e22af32e24124d7421d446a
Size

290KB
MD5

3080583e1e22af32e24124d7421d446a
SHA1

76b9795a9ed2bc301da4c55c942a8ce63af80d73
SHA256

9d7861c0091670991e862f622f10217edf5fb278e16212e44809d2b95745057d
SHA512

3947f60eb066501e15ea3f93073f315cdd6b0c8ccc3da3663698ddd0a43f4160d889ed2ca853a78c9ef730fd45b410c5b9136e362d811122b655c57b0ffa08af
SSDEEP

6144:MGDHUU1LaqMRHQECf0iDTNGuxL6+a9+dsDnhp4vq/N0pbeQ:Mbua3HkXTNGiLBSnhpaq1a9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3080583e1e22af32e24124d7421d446a

Files

3080583e1e22af32e24124d7421d446a
.exe windows:4 windows x86 arch:x86

a7beb6ffed8f35eb3e9f83a1bd8a07f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GlobalDeleteAtom
LoadLibraryExA
GlobalUnlock
GlobalFree
EnterCriticalSection
VirtualProtect
CloseHandle
GlobalAddAtomA
GetACP
GetDriveTypeA
GetLocaleInfoA
RaiseException
SetErrorMode
GetLastError
FileTimeToLocalFileTime
GetStdHandle
LockResource
HeapCreate
InterlockedExchange
SetConsoleOutputCP

user32

GetFocus
ValidateRect
SetForegroundWindow
GetWindow
GetMenuItemInfoA
DrawEdge
ReleaseDC
GetClassNameA
GetParent
GetWindowTextA
OemToCharBuffA
GetCursorPos
EndPaint
ClipCursor
BeginPaint
IsIconic
DrawTextA
ShowWindow
GetActiveWindow

ntdsapi

DsGetSpnA
DsCrackNamesA
DsBindA
DsFreeNameResultA
DsIsMangledDnA

netapi32

DsRoleCancel

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 968KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ