3d34cc9393bfa2f4c58ce0ae349d1c8b | Triage

Sharing

General

Target

3d34cc9393bfa2f4c58ce0ae349d1c8b
Size

860KB
MD5

3d34cc9393bfa2f4c58ce0ae349d1c8b
SHA1

d314798fa8c8a6bea3e4ef03fd04fcbeec51dc94
SHA256

cd00de3bdb7fc3e3c7c2d384bc63c5c5138032e7a803fcb92ccaa606d6500efc
SHA512

80b168efa7c47ac0a8dcb3b0a9c5b1672a845e745bfbbd7d667c738248c743ee21bf65bd70bae272608e3f52649fb1e4430e499d147a9b04080ecf323ff7ab7d
SSDEEP

24576:1rX9KZJuzVfT43WtwUwhGQp0l4nTyYOAxpamZQ72:1rXUzuzVLSWeUEGR6TyYDamOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d34cc9393bfa2f4c58ce0ae349d1c8b

Files

3d34cc9393bfa2f4c58ce0ae349d1c8b
.exe windows:0 windows x86 arch:x86

204693aa89ecdf15c4c069c311cb6852

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

CloseServiceHandle
CloseTrace
ControlService
CloseEventLog

kernel32

GetModuleHandleA
CreateFileA
GetLastError
WriteFile
ReadFile
GetVersionExA
ExitProcess
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
CreateThread
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime

Sections

.text
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 554KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ