3b5fcb820cbae92928dcf5c17da9bea3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b5fcb820cbae92928dcf5c17da9bea3
Size

24KB
MD5

3b5fcb820cbae92928dcf5c17da9bea3
SHA1

3ed47c98f1770d697803c69e1d8c0dabfc536fe1
SHA256

30c1b865c36ff2b914d175fa1a9df37856bcb6bed4fed0b54aae9f88322ca2d1
SHA512

7e3f2401de03e97b88ff5589f6fa1f1f8426c51d7dcef77bbd35c392993ac465b5c7b06831aa6a8a799605d1cdbb97aa3b8521861248eea4e652865c8dc7801b
SSDEEP

384:S2V+pGwtGPMeUOD7yXi07eaUvysgiz8pSXJtE0w6RJKoDdLFg4QWop:jEpt6HUOn1dS4ImJy0wCJ3dWBWop

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b5fcb820cbae92928dcf5c17da9bea3

Files

3b5fcb820cbae92928dcf5c17da9bea3
.exe windows:4 windows x86 arch:x86

690bfab8e14f75d9b996a8e13c14e2a4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

IsValidURL
CreateAsyncBindCtx
DllCanUnloadNow
IsAsyncMoniker
ZonesReInit
IsValidURL
URLDownloadW

wsock32

htons
sethostname
WSAStartup
ioctlsocket
bind
htonl
SetServiceA
gethostbyaddr
listen

user32

CloseDesktop
DrawStateA
FlashWindow

Sections

.text
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE