39a03f90a98ca9113bd76e60b87ee3d8 | Triage

Sharing

General

Target

39a03f90a98ca9113bd76e60b87ee3d8
Size

72KB
MD5

39a03f90a98ca9113bd76e60b87ee3d8
SHA1

de71ddb8f97093dc1ac6a46357467a14abaf2b6a
SHA256

c932c9b8670a8b80a98c94de13c995578a417785a23791ebb010c67d1ce70fe8
SHA512

34bf95c21316e1a0db5bac43bf243c6051d726a58faa1c77bad78e47d96c9402d2a7ca52402929e7f0afba4aac623a331ec038feb1fdacd3f63dfaa6ae167de1
SSDEEP

768:c7Vr+QXJ7fG9JIfqk0krqWkffun7Nxq7xU02LlRPvdYBPVGteS:oVrRXp+Jhk0Mdk88VU02n1YBAteS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a03f90a98ca9113bd76e60b87ee3d8

Files

39a03f90a98ca9113bd76e60b87ee3d8
.exe windows:4 windows x86 arch:x86

c36b042b8cf1ed57190e7f87b3de143a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
LoadLibraryA
GetProcAddress
GetLastError
HeapFree
SetLastError
GetVersionExA
FreeLibrary
GetCurrentThread
GetCurrentProcess
lstrcatA
lstrlenA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsSetValue
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
LeaveCriticalSection
EnterCriticalSection
Sleep
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection

user32

wsprintfA

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ