3a349349dca927f2a00399386df7c255 | Triage

Sharing

General

Target

3a349349dca927f2a00399386df7c255
Size

46KB
MD5

3a349349dca927f2a00399386df7c255
SHA1

be6667c7bda954bc5bd309a78c5adf17c65ef8c4
SHA256

d99dd7ef86e410fe43c5d292ced64524e46ba4c1316b5043069b1b4bc7d18077
SHA512

4e92fcbc3c5ccd54cf769c0151818be3bf85130c126a780cbb572aa1c25dc730d9146d9a46e4460a98250026956362845f86d89f2cc1e4acb7fc4d0cb1e94d94
SSDEEP

768:PJ4uaYLNkn+6A6Xuzil7QV6lvCDoLElVVbynScSxQGSq9W2Un04e5DtAdM0o:FRxkn+6Ru+7QVDDoLEXhynmr9W2Un0t3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a349349dca927f2a00399386df7c255

Files

3a349349dca927f2a00399386df7c255
.exe windows:5 windows x86 arch:x86

1e9c0762e9765aad7c7f5fdf5db4fc6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExA
DuplicateTokenEx
CryptReleaseContext
RegDeleteValueA
CryptCreateHash
CryptGetHashParam

shlwapi

PathFindFileNameW
wnsprintfA
wvnsprintfA
StrStrW
PathFileExistsW
StrCmpNIW
PathMatchSpecW
StrCmpNIA
wvnsprintfW
PathRemoveFileSpecW
SHDeleteKeyA
wnsprintfW
PathCombineW

Sections

.ktwv
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vqb
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdapen
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ