3696ab0231888b800899d95444bb1e0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3696ab0231888b800899d95444bb1e0b
Size

107KB
MD5

3696ab0231888b800899d95444bb1e0b
SHA1

e843a1a40dbe36b10be0fedb1b615a1ceabb5d8d
SHA256

76ea8779a445de0e3f33799171333e12ca8f34722d68aa39d6f6966b3886d9bd
SHA512

603aeb4db01c6ac0e463c5101d99dea17d9a1d5ea6aee27f1458b108e55804cf32e47e888b26cf186364a61c8624363dc30eaf34472f36072bbc5ec3a942d324
SSDEEP

1536:xHgMD6EM8mgTvrHcyJSoGIda9bGkHX98KyUb3VblQ2itdXh/zUm6Ix3RKeCi+M:Z3ZZzRJ8IdeGkH2sbFb0th/wm9ZRW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3696ab0231888b800899d95444bb1e0b

Files

3696ab0231888b800899d95444bb1e0b
.exe windows:4 windows x86 arch:x86

452e807d179221a69a9f39536182a2fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRChrIA
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE