3a56baf8bd65118998d0c1a2e22e231c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a56baf8bd65118998d0c1a2e22e231c
Size

11.6MB
MD5

3a56baf8bd65118998d0c1a2e22e231c
SHA1

b5df6a0362aaee737dc1f4760098f25a1a6d5bbb
SHA256

05d4cfa4bd9d8b6e36f0aa45f94c0d0791703dbb5244f5fbb29e74c3be327651
SHA512

3dff0587a3bd4c94ed3de6c77f6497233480a4145eaa2f9fec62e1bc53d2910c538df847d988a7359dbdb03236d8181936ea10e17886d0dbcfe755ed8d563d5f
SSDEEP

196608:3yB26PMLoIh5iNoc8z0zg0ZhbOxs/p8CSzhrgBOe04eJDbjmzg/aD+AulwH4XbpD:c26PMjh5qocSjqNOx+p8CSz1gBD0DJDb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a56baf8bd65118998d0c1a2e22e231c

Files

3a56baf8bd65118998d0c1a2e22e231c
.exe windows:5 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 110KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.8MB - Virtual size: 8.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xodtxiao
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pyyaylgh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE