3a4842dc4ea480b5ea2eb5d0cdb4b26a | Triage

Sharing

General

Target

3a4842dc4ea480b5ea2eb5d0cdb4b26a
Size

16KB
MD5

3a4842dc4ea480b5ea2eb5d0cdb4b26a
SHA1

e5092c00294becde2418f76507ebf900956622bd
SHA256

36a21b7f4918643ad8d7eeba5169bf8eb57e41319241db66b8b9a782d1534a8e
SHA512

e47fb2c3330c834004f5b25226ce46a3d24598214ac58168dd94e11179e2866c2353eb30453bdb25e50ebc6340c26ce071aaaf9de16643d88e12684c466b11a7
SSDEEP

384:W/ghfHwu4xV8CFme5h+q6zhkQNHkQf0NynPiE:W/EfQu4xVjmEFRQf0NynPi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a4842dc4ea480b5ea2eb5d0cdb4b26a

Files

3a4842dc4ea480b5ea2eb5d0cdb4b26a
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ