3ad6b2702ed0d8178a33c84dc7d1243a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ad6b2702ed0d8178a33c84dc7d1243a
Size

47KB
MD5

3ad6b2702ed0d8178a33c84dc7d1243a
SHA1

19bf7f8ead724b5e93b2212e594d6f4d4ecf2d54
SHA256

4572735f4fab24790559e458630869c3d62d1d16c9aa3097b0164aa4542112fe
SHA512

120b9d3b32bfd0b65dc9a241be33a9a503c2de43175cceff5378b30f06f76ee4008e546184f3f1a5c2d866e4bb166c3c7ec6052ce6dc80a66459fdaa10417f24
SSDEEP

768:RtzdB8mNNq25qMvoiSPJVbLpBfC4iSqng2ux6NxrDWCarG:R9PJLvodJVjfkmx6NxfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad6b2702ed0d8178a33c84dc7d1243a

Files

3ad6b2702ed0d8178a33c84dc7d1243a
.exe windows:5 windows x86 arch:x86

a7528f15e5ac1576b76564ce6a494f3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
HeapSetInformation
SetEndOfFile
DeleteFileW
GetACP
LocalReAlloc
GetFileInformationByHandle
GetProcessHeap
HeapAlloc
HeapFree
GetUserDefaultUILanguage
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentThreadId
GetModuleHandleA
WideCharToMultiByte
GetStartupInfoA

gdi32

LineTo

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ