39f356fbd56e1aa2aaa377994dcd3f0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39f356fbd56e1aa2aaa377994dcd3f0e
Size

128KB
MD5

39f356fbd56e1aa2aaa377994dcd3f0e
SHA1

a69c89a0054fc056033721f84589c5a75491ce2d
SHA256

06c995e0a92e051e32337c63fc6084a60747bbf291cc748cb3ea51bcdb94adf0
SHA512

4a3094e57806b53b0e5bf77217b695a3bb9df4b880963e98f076058249352be49626d41d93e5c7bb07917a97331633f13ddfd4c9308772387343ca3e9a2b7799
SSDEEP

3072:w3KHgJU+ITcdUod+r8+NfCmDli3vH6mOKX5bj5EoYn/RALu8:w3KHQFIivx+NDli3vL3XVj3EAL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39f356fbd56e1aa2aaa377994dcd3f0e

Files

39f356fbd56e1aa2aaa377994dcd3f0e
.exe windows:4 windows x86 arch:x86

d070ca8404a38c637fb8a5a6d9db83bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathW
ShellExecuteExW

oleacc

LresultFromObject

kernel32

TlsFree
LoadResource
TlsGetValue
TlsSetValue
SetEndOfFile
VirtualProtect
GetVersionExA
EnumResourceNamesW
LoadLibraryExA
GetCurrentThreadId
GetUserDefaultLCID
ExitProcess
TlsAlloc
GetCurrentProcessId
OpenFile
GetModuleHandleW

ole32

StgOpenStorage
CoFileTimeNow
CoCreateInstance
CoUninitialize
CoInitialize

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ