3869d4cd3d654a1898d00af54b91dc46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3869d4cd3d654a1898d00af54b91dc46
Size

114KB
MD5

3869d4cd3d654a1898d00af54b91dc46
SHA1

562bd460af4c3babd1f32ae48e1a49f26416830d
SHA256

c1bd1d3504fc44c6434b82174b08702e94f32613b4f597c91b953b1b522a99d4
SHA512

95846e4cb428b1cab98856b3d4450ced474321a69a2b2d86a45c32cc6d650b8b87a14f4c13a2b505db3f97fea5383871fa3d3265475ead4351532dfd22c6df2c
SSDEEP

1536:9tqy722NRmnWg+pE/Ro6zhhDTIpocq/h1A:9tU2NRmnx+pfghJT7cq/h1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3869d4cd3d654a1898d00af54b91dc46

Files

3869d4cd3d654a1898d00af54b91dc46
.exe windows:5 windows x86 arch:x86

3d576843f0c7f3a3a1a08269cfe6e414

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DrawTextA
GetFocus
GetDC
CopyRect
GetCursor
AppendMenuA

kernel32

CopyFileExA
GetPriorityClass
ExitProcess

advapi32

RegOpenKeyExW
RegCreateKeyA

Sections

.jidp
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nhiho
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aflhh
Size: 77KB - Virtual size: 421KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdfn
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ