3789af6af23763d793520b3ef3b17cfa | Triage

Sharing

General

Target

3789af6af23763d793520b3ef3b17cfa
Size

21KB
MD5

3789af6af23763d793520b3ef3b17cfa
SHA1

b7a466cc4a62a418337b232a723f0d5b881fa62a
SHA256

75ee94e6b7f333f3e99c5a52f39d6da7064526f3eccb991ea819106a53c725f4
SHA512

6e49f0306a15a7c14e22e9a6c87fd3e4237c5c4006521638c67a8e8f45e5946a0e46ebd7488cb25f9a3456f152692a16fdcd478c4645b55bc12139f92d9503a9
SSDEEP

384:vwFRTqiSYGX9cy7E3O711Vv/vjmLfszomfeGM:vS69cyw3ArVvHjmLEz3u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3789af6af23763d793520b3ef3b17cfa

Files

3789af6af23763d793520b3ef3b17cfa
.exe windows:4 windows x86 arch:x86

35d876659d45e889871c4254de6e737b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAccessAllowedAce
RegCloseKey
AccessCheckByTypeResultListAndAuditAlarmByHandleW
AccessCheckByTypeAndAuditAlarmA
LookupPrivilegeValueA

user32

BeginPaint
ArrangeIconicWindows
LoadStringW

gdi32

RestoreDC

kernel32

SleepEx
WriteConsoleInputA
VirtualAlloc
GetLastError
lstrcatA
WaitForSingleObject
WritePrivateProfileStringA
WaitForSingleObjectEx
ExitProcess
CreateSemaphoreA
CreateFileW
WriteConsoleW
FindResourceA
WritePrivateProfileSectionA
WritePrivateProfileSectionW

version

VerLanguageNameA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ