3a05e3f7c7347f121c50cd357946e24b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a05e3f7c7347f121c50cd357946e24b
Size

200KB
MD5

3a05e3f7c7347f121c50cd357946e24b
SHA1

52e6cdcfc8020baa446cfa36ca8623e1e815c9e2
SHA256

b12b574a9122787cd746031120602fb86b0b0d9496f3a196a0d99047806ffe5b
SHA512

2786492edceb7f69ed9e5d8d7ba688d21b8ad444b122b54bc7db2652d4b9d14002145d563e8bad28dfbbd4640daedb9ea726f8d5630f814207f6c4ee43bd116c
SSDEEP

1536:GjPK35hmX5xt/b83oSkRzGyeFuurP7/X:IwYTwoTKFuur

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a05e3f7c7347f121c50cd357946e24b

Files

3a05e3f7c7347f121c50cd357946e24b
.exe windows:4 windows x86 arch:x86

cd1bf12b8ece5e7248f3fa67f6d068df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
GetLastError
CloseHandle
WriteFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetFilePointer
ReadFile
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
HeapFree
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetEndOfFile
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 164KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE