3cdd2b40fb95b8bdf54389c2dbf4af1d | Triage

Sharing

General

Target

3cdd2b40fb95b8bdf54389c2dbf4af1d
Size

7KB
MD5

3cdd2b40fb95b8bdf54389c2dbf4af1d
SHA1

fc81da0d8aa9eb9917a15c1e5a440c1b6db35780
SHA256

e59fc5b7a2963827f483a307ab026abfa3479c2b33cbdb3bbff4045377fdbee5
SHA512

5595dea90a7bba8278fb7dac75dbc45165f8b358ad6c0af8062623e457174619f1f15df12793b2c644818e8a5ad66c37df459345cd6a264fb13197a426f980c4
SSDEEP

96:KBMHEyoSzici2pquEMrV+wO+spasqSTGPECgCdukZNX6Mly:IMHE/1cAuEcsjT2hkkZNX6P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cdd2b40fb95b8bdf54389c2dbf4af1d

Files

3cdd2b40fb95b8bdf54389c2dbf4af1d
.exe windows:4 windows x86 arch:x86

6a349f2e61dab14d0d58a35ac37aed65

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
malloc
signal
strcat

user32

EnableWindow
FindWindowA
ShowWindow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE