3c89eb38a7e837757f27080449085955 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c89eb38a7e837757f27080449085955
Size

30KB
MD5

3c89eb38a7e837757f27080449085955
SHA1

60cb427aeebb54d8a4d1336dabe09ec3c8f04b77
SHA256

9641d32c2c7a227e8394627325859b28189bbba89785a07066b3742f3acde68e
SHA512

e3f4b28a15aa579f9936dfeac2cbbc36e5b77a8f9b953162b094975b747daef80296b40cb10ce2cff129083cc9214ab03e44ab24b266553e9518d217da9cda83
SSDEEP

384:cfuruZyIZIm5GryGRSLzmS8iHhiS8D0kZBOD+oBnHlqZVJjhg2rMmKcU:cGBerGryGRHaHh98/BOD+ohkjC2ob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c89eb38a7e837757f27080449085955

Files

3c89eb38a7e837757f27080449085955
.exe windows:4 windows x86 arch:x86

bbbf08b065ed16c1daca41f96c1d989a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleFontSize
IsBadHugeWritePtr
GetCurrentProcess
ExpungeConsoleCommandHistoryA
CreateThread
RtlZeroMemory
GetNumberFormatA
GetFileType
RegisterWaitForSingleObjectEx
CreateThread
BuildCommDCBA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ