3b892416cd797d8745995be3949e32e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b892416cd797d8745995be3949e32e8
Size

4KB
MD5

3b892416cd797d8745995be3949e32e8
SHA1

88c413d3a5b5efb84382d0720e2a338abb79af84
SHA256

5b540713929ff3b93b35cdd015e013fb313d0141a69fed84b872a80402a8f9ba
SHA512

f24d184b38d009ea82165887cf8d06c15cf3ddcbc47ee32d9ee575867c94c46e4261051c3cddf91e4d491b2fd4b7aa1f839684a74c89591a5de5989e0d4ab21c
SSDEEP

48:6L2aiEIcUyiDHsKIVjrWpYnDJ1LbWvtuOX:wvUkjS0DJ1LbWvtuq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b892416cd797d8745995be3949e32e8

Files

3b892416cd797d8745995be3949e32e8
.exe windows:1 windows x86 arch:x86

50423c23c2048f86a40c015168a1f620

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetModuleHandleA
RtlUnwind
WinExec

user32

RegisterClassA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
CreateWindowExA
DefWindowProcA

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

crtdll

__GetMainArgs
exit
raise
signal
strchr

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 8B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 380B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE