3ab1961c834e8019640f7cb7ab6879a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ab1961c834e8019640f7cb7ab6879a4
Size

484KB
MD5

3ab1961c834e8019640f7cb7ab6879a4
SHA1

3cfe5dd6bda6fc6449a403bf4c05cd90a9c71278
SHA256

7961aefa51c3b93dc1a4afee7e5287ba1e2bc0f059ed9054f708cec7c6a91e16
SHA512

0d1c75c4146e9e42946561be517fb76ecd58719e4c0bc0af98926b0b48b2d8f670cdb42075f0ce95b24af3398af4e2bf0093ec3f4ed271737060544618692d89
SSDEEP

12288:5lKuJBmfTAln6zF55v1sP9xuIS7jeOO1BD1Bhr0Wu:5lKuGfTw6d94Sf5O1BD1BhYWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ab1961c834e8019640f7cb7ab6879a4

Files

3ab1961c834e8019640f7cb7ab6879a4
.exe windows:4 windows x86 arch:x86

aa2a4127c812eca5d8c131f0be6f24eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

CsrCaptureTimeout
RtlMapGenericMask

user32

GetActiveWindow
GetClipboardOwner

kernel32

GetSystemDefaultLCID

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE