3981c1924df710cb9b34bef9049dc6ed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3981c1924df710cb9b34bef9049dc6ed
Size

47KB
MD5

3981c1924df710cb9b34bef9049dc6ed
SHA1

b9f0d00bf1cfc58ce78e9c3f606261f4e37bdc66
SHA256

419f3259ce9c4c75866f45ddd36d828084422122cdedf21298acfe380cf2da65
SHA512

e13a198b550a7bfdf9746a650b282eacd04f751a5032dcedc3830ad7e5e3dc7dc674ad513827aa86d7b11e9952eda4b7ed79ac7599c46972999a0a354b8462dd
SSDEEP

768:jHmtDQ3OcwD7zxlTrxsE9uOPxeYQ4cLpQzxqUAVLcbDxh4dxYJkfWw3NOdfzesuS:jd3PwbxjJuOZQ4Sp84UARchh293+p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3981c1924df710cb9b34bef9049dc6ed

Files

3981c1924df710cb9b34bef9049dc6ed
.exe windows:4 windows x86 arch:x86

6f1a827dec3fbbed96b0855f2ccec630

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceA
DeleteFiber
GetProcAddress
GetModuleHandleA
Heap32Next
SetConsoleCP
VirtualProtect
VerifyVersionInfoA
VirtualFree
VirtualAlloc
WaitForMultipleObjects

ws2_32

connect

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

Sections

.code
Size: - Virtual size: 144KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE