3a4fd1554624e8b1834731d53b7fe0b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a4fd1554624e8b1834731d53b7fe0b4
Size

361KB
MD5

3a4fd1554624e8b1834731d53b7fe0b4
SHA1

5bccd9251dac7808d52a491f6afceee38b968740
SHA256

8ce92dd7b1135466df9865d9be1495d95dc4d3d385d5a5711b52335443634d55
SHA512

8c60268be9fa580ff337cf93d1b097e4bd050ad657df9ba8f3c2b5d5274d95cb13a1ceebc53ad01e6526ca76bb17efb3a3977a76b19eba333474a424e289f124
SSDEEP

6144:6MYIUIr+OXOBaU7iGYiJkaV2OFbC4XEqPTY/U1GvbYG+XtLETkzmo:6MYIUZxgU7iGYiJkaC2fPTY/U8vbYj5B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a4fd1554624e8b1834731d53b7fe0b4

Files

3a4fd1554624e8b1834731d53b7fe0b4
.exe windows:4 windows x86 arch:x86

e029b60daa93ccf31b4b5e2d5dcc500f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExA
FreeConsole
Sleep
FindClose
GetTickCount
GetVersionExW
TlsGetValue
GetCommandLineA
CreateMutexA
DeleteCriticalSection
ReleaseMutex
GetLastError
CreateSemaphoreA
VirtualProtect
OpenMutexA
SetLastError
GetModuleHandleA
CloseHandle
SetEvent
SearchPathA

advapi32

CloseEventLog
RegEnumKeyExA
LsaFreeMemory
GetFileSecurityA
CloseTrace
IsValidSid
EqualSid
LsaSetSecret
RegCloseKey
RegCreateKeyExA
RegLoadKeyA
LsaClose
OpenEventLogA
FreeSid
RegCloseKey

loghours

DirSyncScheduleDialog
DialinHoursDialogEx
DialinHoursDialog
DirSyncScheduleDialogEx
LogonScheduleDialog

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ