3d5eda3754118468d1c9674b88dcb03b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d5eda3754118468d1c9674b88dcb03b
Size

80KB
MD5

3d5eda3754118468d1c9674b88dcb03b
SHA1

55efc0d28b44bbd14ed5a06ced41e88f69aaf95d
SHA256

35a74ddf8bb5ce18f319f6baffac3c508354aa02732ea2c02fff487082e30c76
SHA512

c029ae7c2afec3f1e9e85f647c7b56005169c6c69e2a66fee3c4e1dd153746288cf52355b768e34c6fba64308fb3a8af32552596498d60cf38e70eb40a3cfde3
SSDEEP

1536:W4QXIE5WcdHhonzD5AtuLc4b/AE33lCu3i/JQKgteC82hW8fPL:JQXH5LdHID5AILDbIEnlCEi/JkteC8v0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d5eda3754118468d1c9674b88dcb03b

Files

3d5eda3754118468d1c9674b88dcb03b
.exe windows:4 windows x86 arch:x86

908faaba43fd06d9a9b8a40f6e09cc47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
GetVDMCurrentDirectories
GetComputerNameExW
GetSystemDefaultLangID
CreateNlsSecurityDescriptor
GlobalAlloc
Module32Next
FlushInstructionCache
Module32First
GetUserDefaultLCID
InterlockedExchangeAdd

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE