3b39a57b5bff6c20389be2da0e45a461 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b39a57b5bff6c20389be2da0e45a461
Size

58KB
MD5

3b39a57b5bff6c20389be2da0e45a461
SHA1

284be417c0dc5811525b8f6b521099419efbbf33
SHA256

1e17b48cebc767cd3be22bfbaed81a72e9055772454683d7b55023038677222b
SHA512

e5b0bff7daf998c354647b3aad043e9c70588debeeeecab83d1e8eee3bcd896cb2c991561fd625920a3ae5ba4edc365cc6cfe4236b533f02b3836a433a5a0a80
SSDEEP

768:mHLvF5ODTDTsPGAD73/g5/KOy5VUiD71nP/NyjRpWL9RcoczEoDf1Quwc:UM/TsPGk3/F5VUaP8U9RrdWkc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b39a57b5bff6c20389be2da0e45a461

Files

3b39a57b5bff6c20389be2da0e45a461
.exe windows:4 windows x86 arch:x86

323496e87538693bb5d0442ca671630e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
Sleep
ReadFile

user32

GetFocus
CopyRect

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 67B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ