3cf28c486999d48d6d84f558c2500cca | Triage

Sharing

General

Target

3cf28c486999d48d6d84f558c2500cca
Size

68KB
MD5

3cf28c486999d48d6d84f558c2500cca
SHA1

568c280ec3d94ad0db90c844d313e02006338620
SHA256

c1b3c36138bb6ea17ef72e71f2a4bfc782625edf132dc311671bbe432de368e0
SHA512

11dfa076218cded5b2b283deaa6174b62c3ba535c400f839664c955546d36ff5a3ef419b68afeee9c9f0704f17efaea75c4df6e57f7c936a5b2e8f493aa599f2
SSDEEP

1536:UDoJjzZfUkP2Pcva6CaJkyLWzHBQ/mwcyOqWni9td+zX:UDojzZfUkPgN/9QOwc8uWtUzX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cf28c486999d48d6d84f558c2500cca

Files

3cf28c486999d48d6d84f558c2500cca
.dll windows:4 windows x86 arch:x86

27516699f020153533a6e3a7bd3394a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
ExitProcess
ExitThread
GetFileSize
GetStartupInfoA
LocalAlloc
RaiseException
TlsGetValue

msvcrt

__p__commode
__set_app_type
fwprintf
strspn
swscanf
wcscmp
wcscpy
wcslen

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 894B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ