3746349acd46443bacbacc3b55bb3f96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3746349acd46443bacbacc3b55bb3f96
Size

114KB
MD5

3746349acd46443bacbacc3b55bb3f96
SHA1

5067103cbc36009195043d9669eb5a04ac3d436a
SHA256

e396e0ce54b28e39c3228e3572d5e89a1ce6a05cc2c1d934239bcb5d6d053052
SHA512

c21547c55618161ebf3c80204532216b6def7847e00ba7b9656b7296f1e4f3b71d2b22883147a51072f2f3e0e35a154bfc2f470209c8652739fa5ec45f761f4a
SSDEEP

1536:V8rdCnpLnOvs4s/Uy6VwIPkL3ltN5aBxonyiMCpHFj4g/4poFravVfeAb3LvYdb9:V8RU1jiwVYanfHpEpoFrAwFcu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3746349acd46443bacbacc3b55bb3f96

Files

3746349acd46443bacbacc3b55bb3f96
.exe windows:1 windows x86 arch:x86

091f6c7c6bf5506030cf9d7e9c8d5eee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

TextOutA

winmm

waveOutGetPosition

Sections

CODE
Size: 103KB - Virtual size: 608KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE