3824cafb0c3f3f5bbcbeb2b8758c8235 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3824cafb0c3f3f5bbcbeb2b8758c8235
Size

5KB
MD5

3824cafb0c3f3f5bbcbeb2b8758c8235
SHA1

7b247f9f2ac15a5911e316e59af58e8259238ce8
SHA256

3679d0e20f2956b0c931785d7d1c4a5a8121abc01195a3100e58c034c919d3de
SHA512

be2fcab51ee7e85df66ba1eaae07396cd82602283d9a9136d8adeada1345a770284f3a5224c90e678595e2c38cde869f2ef3cba85250ed3af5f84489ba378990
SSDEEP

48:6SQrcYCEEZb3NQyNzSp4xdVkxyUncBtYOq5swNum3m0mHcUWA7ZJdbLBhKfT/g:awYCEE53NDNA0gxFH5pfW0ozWA7ZJ16

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3824cafb0c3f3f5bbcbeb2b8758c8235

Files

3824cafb0c3f3f5bbcbeb2b8758c8235
.exe windows:4 windows x86 arch:x86

043a1496902f886e998c9aed39de3b25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateRemoteThread
ExitProcess
GetModuleHandleA
GetProcAddress
GetTempPathA
OpenProcess
Sleep
VirtualAllocEx
WriteFile
WriteProcessMemory

msvcrt

memcpy
memset
strcat
strlen

shell32

ShellExecuteA

user32

FindWindowA
GetWindowThreadProcessId
MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE