3adc3fade0ed265e3faaeaf6c96b4c20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3adc3fade0ed265e3faaeaf6c96b4c20
Size

135KB
MD5

3adc3fade0ed265e3faaeaf6c96b4c20
SHA1

16e03884328ae133f840239d7b8b8fed82dea291
SHA256

98c57839f8746f7c708ea8db8db157b162b9149b0a5f989ae1c0107fc7e2408e
SHA512

78b0e37c3923b0a2f43cbdc36d9e2be499651df9c463c5991df12d9c68d637d600640fdb5c9f738af13acdd503b4d1d3761971ff73a516125e6947b0fb1c3bea
SSDEEP

3072:X9VRQWs7VKwoSV/5/E7PcrUHcyKB2w4caVAKgFB:zGWbwoGq7ErUHeB2wgVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3adc3fade0ed265e3faaeaf6c96b4c20

Files

3adc3fade0ed265e3faaeaf6c96b4c20
.exe windows:4 windows x86 arch:x86

3f50ce8a1ebcc273755f7e3a7ae2687a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
ExitProcess
GetConsoleOutputCP
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetThreadLocale
IsDebuggerPresent
LCMapStringW
LoadLibraryA
LocalAlloc
VirtualAlloc
VirtualFree
VirtualProtect

user32

GetDesktopWindow
GetFocus
SetForegroundWindow

gdi32

CreateBrushIndirect
CreateDIBSection
CreatePen

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 653B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ