3d48356e30da876562fbad6201d279d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d48356e30da876562fbad6201d279d6
Size

213KB
MD5

3d48356e30da876562fbad6201d279d6
SHA1

570bd9dca5c4459001c99b5d827568dfdb605518
SHA256

47e9ffc112be6e4a677eb0a9da34a6d9dc5243f00db04fb1014dc27696008471
SHA512

88dd1c57a1d40a11d5ffd039e5f9ed113cb248679f261d10714850f49b3cd5f78db51862dfc4d1b97d90393125519fb9465874e84ce73c55d2d6a380c7f62c16
SSDEEP

6144:5cVpkoi5k5OJj8717C/cKC8GmTsNm6lhlHD+v0r:aiHMu/mmTum6lr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d48356e30da876562fbad6201d279d6

Files

3d48356e30da876562fbad6201d279d6
.exe windows:4 windows x86 arch:x86

cda7b6d8426e377e3ccc4d46e41e796c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
ExitProcess
LCMapStringA
GetCurrentProcess
LoadLibraryA

user32

CharLowerBuffA
CloseWindow
SetWindowLongA
wsprintfA
CreateWindowExA

advapi32

RegEnumValueA
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegCloseKey
RegDeleteValueA

Sections

.text
Size: 164KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ