3691dccecaf72542143210b8bbf3c113 | Triage

Sharing

General

Target

3691dccecaf72542143210b8bbf3c113
Size

37KB
MD5

3691dccecaf72542143210b8bbf3c113
SHA1

3c664bdd6d75d33b3295f1278151320b80e5604e
SHA256

983280fe872cf6fed032b73bbaf974b6d8306794398e4dd491de8394f4eb09a3
SHA512

1609fc66a9aec155a4153bd4b0e235b64a129b6dbec5a0fed360bcc0639fe4c2da14be4fa782a80cd94c4c6663f33ace6e02f710274992f546a2a28a9e2db85c
SSDEEP

768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrP:j0Rbb5WRQYt9ir/2wraI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3691dccecaf72542143210b8bbf3c113

Files

3691dccecaf72542143210b8bbf3c113
.exe windows:4 windows x86 arch:x86

879072da78b6146d76f51c669b56a5f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect

user32

ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE