1c3e35b1504d079ae3017510619f28d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c3e35b1504d079ae3017510619f28d4
Size

47KB
MD5

1c3e35b1504d079ae3017510619f28d4
SHA1

a97abe77a68aa33780557bdf24832438b85952dc
SHA256

4cfd6aecbc34f6c1d8b653bed98fa19c14d1cecb8e4b3b39885554f6968464bd
SHA512

5ae838b8c9be912f0079fbb417530ed6e5afce315c32c2cf7594bbc41535a5cc29db39f67ae1408e3ff662542e563c2fb00c209aa680ae8126954b58f7a874c8
SSDEEP

768:Plzdt84NNT6kAF9oCkWcKGFon+tB5qFQS5yzK:PV/7wtGSn+tBUeE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c3e35b1504d079ae3017510619f28d4

Files

1c3e35b1504d079ae3017510619f28d4
.exe windows:5 windows x86 arch:x86

a7528f15e5ac1576b76564ce6a494f3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
HeapSetInformation
SetEndOfFile
DeleteFileW
GetACP
LocalReAlloc
GetFileInformationByHandle
GetProcessHeap
HeapAlloc
HeapFree
GetUserDefaultUILanguage
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentThreadId
GetModuleHandleA
WideCharToMultiByte
GetStartupInfoA

gdi32

LineTo

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ