3ae16c686cc50c3cd6cdf7ba1067e0a2

General

Target

3ae16c686cc50c3cd6cdf7ba1067e0a2
Size

448KB
MD5

3ae16c686cc50c3cd6cdf7ba1067e0a2
SHA1

3f8d32f0741d80b45062f09bb59025290f6e3d5c
SHA256

7de37f17d6667488f19531159c1ef00f444df49f869ae7533098057b24578bf7
SHA512

d7ffdfb46a053c9397063b020e51691ab11439e48d3170c3a6a6c21980817731b8754af60d56e69b4347e150857d628a12232918356c6fd1752a2ffeb26b859c
SSDEEP

12288:loKkxr2Qo/ZXqx/hpHVgi68FD3jnzjBSduTWoKrL70:eHKTqx/hpHKZ8lLBSEWoKrL70

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ae16c686cc50c3cd6cdf7ba1067e0a2

Files

3ae16c686cc50c3cd6cdf7ba1067e0a2
.exe windows:1 windows x86 arch:x86

69b5f534b6bcada43515b93f657b798b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FindAtomA
GetCPInfo
GetCommandLineA
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetProcAddress
GetProcessHeap
GetTickCount
GetVersion
GlobalLock
IsDebuggerPresent
LoadLibraryA
SearchPathA
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrlenA

gdi32

CreateBrushIndirect
DeleteObject
GetDeviceCaps
GetNearestColor
SetTextColor

advapi32

BuildSecurityDescriptorA
GetPrivateObjectSecurity
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryValueA
RevertToSelf
SetTokenInformation

user32

AppendMenuA
BeginPaint
BlockInput
ClipCursor
EndDialog
EqualRect
FindWindowExA
GetMenu
GetTopWindow
InvalidateRect
IsCharUpperA
LoadCursorA
MonitorFromRect
PostQuitMessage
ShowCaret

Sections

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flat
Size: 512B - Virtual size: 109B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69b5f534b6bcada43515b93f657b798b

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.data Size: 82KB - Virtual size: 82KB

.code Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.flat Size: 512B - Virtual size: 109B

.rsrc Size: 1KB - Virtual size: 1KB

.data
Size: 82KB - Virtual size: 82KB

.code
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB

.flat
Size: 512B - Virtual size: 109B

.rsrc
Size: 1KB - Virtual size: 1KB