3966ef9df71b396f27f10428945eb9a6 | Triage

Sharing

General

Target

3966ef9df71b396f27f10428945eb9a6
Size

111KB
MD5

3966ef9df71b396f27f10428945eb9a6
SHA1

594c2df51c9d3eb7ea5cfbc71d0402f5908f37b0
SHA256

15f360229a99fe33df94bf7075fa966d55d14e566851b9de13474feb78899951
SHA512

d7b0871ab5832f43be0920b4e72c2856150ab6a7820db9a8f593b6067c3680e4171289d227c285063e7ea51cf17dc94ff2a079860d742e598b669ebc4418b5ba
SSDEEP

3072:Q2Rr4GGvU0gIpchZPEMnbJjBkMqhGKZTbP:dRVAU0nAdnhibZX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3966ef9df71b396f27f10428945eb9a6

Files

3966ef9df71b396f27f10428945eb9a6
.exe windows:4 windows x86 arch:x86

e466c9a82062b4a148a2e242f368716a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryExW
GetDiskFreeSpaceA
ReleaseActCtx
CreateFiberEx
GetPrivateProfileIntA
GetFileTime
GlobalAlloc
LoadLibraryW
lstrcatA
GetTimeZoneInformation
GetTickCount
AddConsoleAliasW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 55KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE