32c3c656ff249472a8f9346b1b591b1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32c3c656ff249472a8f9346b1b591b1c
Size

56KB
MD5

32c3c656ff249472a8f9346b1b591b1c
SHA1

7cedc26558fe5e6de6ef718132f2816abc01a5e5
SHA256

50d1088fd6986d594dc4aa932c0ddd3d2cc24d5e22133e186d4799b1ce734b1e
SHA512

872cfca3cd1f4d58ff45943092d2d31aab43d460102f83f6520647f8a4af760dfe734573af910bbe7fa4dbf9e2651295b2c13f75925a4a82a352d9d07ed9b341
SSDEEP

1536:rTtuwPvQdHVfn9qyNwNBnWu9sl6WcjM5X:/tfvQXvhNaBlWyMF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32c3c656ff249472a8f9346b1b591b1c

Files

32c3c656ff249472a8f9346b1b591b1c
.exe windows:4 windows x86 arch:x86

bc3c339c2293127a97ed30698940d7df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DebugBreakProcess
SizeofResource
WritePrivateProfileSectionA
OpenProcess
AllocConsole
SetDefaultCommConfigA
CreateActCtxW
SetCommConfig
LockFileEx
TransmitCommChar
GetProfileSectionA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE