3c4e613afc895f6bd2b1d5773d496bf3 | Triage

Sharing

General

Target

3c4e613afc895f6bd2b1d5773d496bf3
Size

453KB
MD5

3c4e613afc895f6bd2b1d5773d496bf3
SHA1

dad151f222540563e87289d3685ce04918698ecc
SHA256

2d1fc952cd7a83650c694ae939bb663fdb89825960cbbdc041233554e8117180
SHA512

81f22be0f4083f0b25fae26266d91b500a221612100a6ceceb726bd415d2bcdae0c6bf7f56b26d0384072eca8b9d22db7322e991adbb6bd97bcd32126770f70a
SSDEEP

12288:zG2U1CwpmH4T1G0LGRHIYXHYy0PVfJb6dgYlHFgnvc1JTP:zC1fV5bLGRHxWiHGnk1x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c4e613afc895f6bd2b1d5773d496bf3

Files

3c4e613afc895f6bd2b1d5773d496bf3
.exe windows:4 windows x86 arch:x86

4679b7f5e3a5ebaf5292413c31ea8bdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomW
ReleaseMutex
DeleteFileA
FindVolumeClose
EnterCriticalSection
GetCommandLineA
HeapSize
GetEnvironmentVariableA
IsBadReadPtr
GetStdHandle
GetExitCodeThread
SetEndOfFile
ResumeThread
GetVersion
VirtualAlloc
SetFileAttributesA
CloseHandle
GetCurrentDirectoryA
GetFileSize
WaitForSingleObject
CreateFileA
DeleteAtom
ExitProcess
GetModuleHandleA
FindVolumeClose

wininet

FtpFindFirstFileA
FindCloseUrlCache
FtpOpenFileA
FtpDeleteFileA
DeleteUrlCacheEntryA
HttpEndRequestA
FtpCreateDirectoryW
FtpGetFileW
DeleteUrlCacheEntryA
FtpPutFileA
DeleteUrlCacheEntryA
HttpQueryInfoA
FtpGetCurrentDirectoryW

snmpapi

SnmpTfxClose
SnmpTfxClose
SnmpTfxClose
SnmpTfxClose

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 604KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 447KB - Virtual size: 446KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ