3a6cb154c0509b33ead2a8f693c3200f | Triage

Sharing

General

Target

3a6cb154c0509b33ead2a8f693c3200f
Size

1.5MB
MD5

3a6cb154c0509b33ead2a8f693c3200f
SHA1

4737314ecc1c67316db51df4234a3581e14e17ce
SHA256

6d9ff2a4e151b2316950fa2199ae278dcad0314b330fd56461802f6954abc1f1
SHA512

d13234ac1e6ed7daf2c673de3b6262db28678266ddcebaec01601f2f4a0fc0c916bebb642f3db1931b0df5f0cef5e304e0738b3d55bb541d75d8bef5b044bf6a
SSDEEP

49152:fM5oEk2E9PnOCp4CYzQcZ4jJWdsO4la23+bj:U5oEXSnfpCJK8Ult+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a6cb154c0509b33ead2a8f693c3200f

Files

3a6cb154c0509b33ead2a8f693c3200f
.exe windows:4 windows x86 arch:x86

93fbe85150dff48a406179e7a918c360

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

.text
Size: 20KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE