3d0e71a77db43c33c6eb17d194933b89 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d0e71a77db43c33c6eb17d194933b89
Size

92KB
MD5

3d0e71a77db43c33c6eb17d194933b89
SHA1

aee3948d4115b11367af8f3876de5045ef8a6977
SHA256

51a59cfc30d16cae80daa3538c9fdc7a3af19be44449fb6bd05c853b84f4df08
SHA512

d2ed6788e9f0154887696cf687346e70a4e07ff372eb7b7e989c9d040e11dbc9512b5f178fc90fdab3a1d16416fdebfc0649cf027cf7815b37dd07c7ccfc4f89
SSDEEP

1536:BktCDweByZXWaxw/TGDKCz93lgD678KJRclvsi8yMAVAX7Yex:BGCDEZXWaK/yuWZlgDG8KXclki8yMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d0e71a77db43c33c6eb17d194933b89

Files

3d0e71a77db43c33c6eb17d194933b89
.exe windows:4 windows x86 arch:x86

794f720491cfb3bab7d3b7c35e78cd9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

fread
perror
malloc
fclose
sprintf
free
fopen
strspn
strcspn
fgets
fwrite
getenv
strncmp
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
printf
_iob
fprintf
exit
strchr
strrchr
_exit
_strdup
_stat

kernel32

QueryPerformanceFrequency
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
QueryPerformanceCounter

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE