3a99ec3cf26b2febc9704ecffdef8c17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a99ec3cf26b2febc9704ecffdef8c17
Size

124KB
MD5

3a99ec3cf26b2febc9704ecffdef8c17
SHA1

5b0c1a2c124240fbc85f06629bafdd5f2af1ad48
SHA256

5cef4c24bb57a60f290f75d027bd16145c158ba260cbb7457858ed70849e8f63
SHA512

942c2c3118d2a9dd441cd727011abef7a7acc0e656efc6bcb484ce1766681909d84bf800365bfdd23de08c4c835df72f8b88cb0b02ae0b9beb26217843d46461
SSDEEP

3072:qnpc6QQivfiPiOTGWpVBDKy+xLG2KbwA0L+efw696LA:qpc6eHobTTBDKPK/efwmr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a99ec3cf26b2febc9704ecffdef8c17

Files

3a99ec3cf26b2febc9704ecffdef8c17
.exe windows:5 windows x86 arch:x86

4afd4e5f01c07b2143f83d6f6603a401

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrCmpLogicalW
PathCompactPathExA
StrCmpNIA

kernel32

GetSystemDirectoryA
lstrlenW
GetModuleHandleW

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xsys
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ