03e3ccdf10b8fd43d762b10ba5ed4289 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03e3ccdf10b8fd43d762b10ba5ed4289
Size

51KB
MD5

03e3ccdf10b8fd43d762b10ba5ed4289
SHA1

944d5a20e48bed9b2f5712e53f16b28b03209623
SHA256

a455f71372daafdd9e9d2fe359033f47a7784527e9f050b7bdff56ff0b23cce9
SHA512

05bb8e11aec9de9bd53fe117ba18dfde99db6fa8e75e30d202639003e838a0f14aaaeddecb8ea3e4d66ce08600ed890e771bf0bab770b59307e3a481047fb2f0
SSDEEP

1536:UQmRLwMzgjssUTiOI5zRLlL94qA89ja9Rq:UQmxls4T1I3pB4Nt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03e3ccdf10b8fd43d762b10ba5ed4289

Files

03e3ccdf10b8fd43d762b10ba5ed4289
.exe windows:4 windows x86 arch:x86

ba3be3c92b07c6306a66a3ab3654e760

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStringW
BuildCommDCBW
CopyFileExA
OutputDebugStringA
GetCommandLineW
SetConsoleNumberOfCommandsW
IsBadStringPtrA
SetFileAttributesW
GetCommandLineW
GetConsoleAliasExesA

user32

GetWindowModuleFileNameA
RegisterClipboardFormatA
CreateDialogParamA
IsCharAlphaNumericW
wsprintfA
GrayStringA
SetWindowsHookExA
SetPropA

gdi32

EnumFontFamiliesExA
GetCharacterPlacementA
GetCharABCWidthsFloatA
GetCharABCWidthsFloatA
GetEnhMetaFileDescriptionA
CopyEnhMetaFileW
GetTextMetricsA
TextOutA

Sections

.share
Size: 44KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasm
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ