3ad3cca4d9d606fb611fbb254dbdd606 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ad3cca4d9d606fb611fbb254dbdd606
Size

53KB
MD5

3ad3cca4d9d606fb611fbb254dbdd606
SHA1

b12cf85949cfbfb1d3535299f39fd088c8cafe6e
SHA256

f28b895ce75c59dd36748177c8980c685cf7344c96322e317817ad1e0bd64ab3
SHA512

3494bf1fdfdbcc398c1f98bbb9be23a0a7918404df6eeee6631ce3558306594ba7fe9b28eb3587a51c3cabcfc54af3dcc9d0ee74d6c5ad0ff1c30a1acd83a8d3
SSDEEP

1536:M+m8bC26dp6p8JVS1V2J2Z6nlQi72Ljwf/:M+IdMp8JVeuU0/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad3cca4d9d606fb611fbb254dbdd606

Files

3ad3cca4d9d606fb611fbb254dbdd606
.exe windows:5 windows x86 arch:x86

224b63808b85b38fad9446b95a4544b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecW
PathFindFileNameW
PathFileExistsW
wvnsprintfA
PathMatchSpecW
SHDeleteKeyA
wnsprintfW
StrCmpNIA
StrCmpNIW
StrStrW
wnsprintfA
PathCombineW
wvnsprintfW

advapi32

CryptCreateHash
CryptGetHashParam
RegQueryValueExA
RegCloseKey
RegDeleteValueA
DuplicateTokenEx
CryptReleaseContext

Sections

.svwj
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ojsb
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wxav
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ