3a1473da98b3f0236f289fb83d9407da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a1473da98b3f0236f289fb83d9407da
Size

108KB
MD5

3a1473da98b3f0236f289fb83d9407da
SHA1

3483bacffd52d6d640793d5a4ff7327a9ec22b2d
SHA256

e936d964b213fbe1072e00fe7af62bb97354ed7863f5330eec3c8a54b2802064
SHA512

b3603d2a687174fdcc0ebf0f115e078ad7a0bc19c621d928d6d139bc8cbe61d759bf2f51a522518550716e6bd5a26cd822053e47f96bc2bd30dd1df22925694d
SSDEEP

3072:T7TuCYRrnvbWb/D3JA1texulcQL9XRlyRAKA:HTcnCb/Dmzexul9XRly

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a1473da98b3f0236f289fb83d9407da

Files

3a1473da98b3f0236f289fb83d9407da
.exe windows:4 windows x86 arch:x86

7649c52055d343e72c1077b493f91b44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetNativeSystemInfo
GetSystemDirectoryA
WritePrivateProfileSectionA
WritePrivateProfileSectionA
VirtualAlloc
Sleep
SetConsoleCP
GetCommandLineA
HeapValidate
GetComputerNameA
VirtualAllocEx
_llseek
CreateThread

user32

DrawStateA
ExitWindowsEx
PrivateExtractIconExA
MessageBeep
CreateCursor
CharNextExA
LoadBitmapW
GetWindowTextA
SetMenu
RegisterClassExA
SwitchDesktop

gdi32

RemoveFontResourceA

Sections

.text
Size: 96KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 904B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ