3adec619906591f710429f178ea31099 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3adec619906591f710429f178ea31099
Size

870KB
MD5

3adec619906591f710429f178ea31099
SHA1

7c2735b729d24b86c781bb63858e606ab056f7da
SHA256

51dd6d9440fd460d1d3fb099b32387b5eae9d2c226a6ce32ae836cd48b231152
SHA512

3311872f993b5f9a3f1c9787137fab4d9c5a80de437a2644178a7bbd21f0bdf5e0afee8dbd4abb1ae60cb42c4f7d5e53a848cd6e23ac54d40427a9603fb4234b
SSDEEP

24576:Zex+JMOdZeQ0+RNZfMCtuB+wLeKL1YpXas9:ZbJMOdoQVDk+JKL1KX19

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3adec619906591f710429f178ea31099

Files

3adec619906591f710429f178ea31099
.exe windows:4 windows x86 arch:x86

7b67c0d908a779ce931b20ac4617bfdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
CreateFileA
CreateFileMappingA
HeapCreate
IsBadCodePtr
GetACP
GetCommandLineW
HeapDestroy
SetEvent
GetModuleFileNameA
GetStdHandle
CloseHandle
SetLastError
GetFileAttributesW
GetEnvironmentVariableA
Sleep
GetModuleHandleA
TlsGetValue
lstrlenA
GetStartupInfoA

user32

CallWindowProcW
DestroyMenu
PeekMessageA
IsZoomed
GetClassInfoA
DrawTextW
IsWindow
DispatchMessageA
GetSysColor
DispatchMessageA
CreateIcon
FindWindowA
GetWindowLongA

stclient

DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow

timedate.cpl

CPlApplet

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 862KB - Virtual size: 861KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ