3733fff2761d5551a4c2d5cce27e948a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3733fff2761d5551a4c2d5cce27e948a
Size

17KB
MD5

3733fff2761d5551a4c2d5cce27e948a
SHA1

9bc4c2aad5c90dd79de3bf6d0e3c07ba3d3acdbb
SHA256

751cd7bef0b1e74552e4f442a15ed3273df564141b56d943bb329d67743d7d3e
SHA512

bf1446d0d55dd28807ffd544b327146a0ede1d2393ec51f73af27a3b8ebf1b5c4672e219b875f038e84e12900612b674652f9b6799aaae79450356f1c25c2dad
SSDEEP

384:V+fODXkGPTegIl7uIWnQBI48R/Hrg9ygEHs:U2JvIVuJQBs/HIyvs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3733fff2761d5551a4c2d5cce27e948a

Files

3733fff2761d5551a4c2d5cce27e948a
.exe windows:5 windows x86 arch:x86

fa8560b3dd08ee001893e0edd10c4665

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
SetUnhandledExceptionFilter
ExitProcess
GetWindowsDirectoryA
lstrcatA
CreateFileA
VirtualAlloc
GetProcessHeap
TerminateProcess
IsDebuggerPresent

user32

TranslateAcceleratorW
LoadCursorW
GetDlgItemTextW
EnableMenuItem
DefWindowProcW
UnhookWindowsHookEx

comdlg32

GetOpenFileNameW
FindTextW
CommDlgExtendedError
GetSaveFileNameW
PrintDlgW
ChooseFontW

advapi32

RegOpenKeyExA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ