3b1474590bd1c19b754b076467242865 | Triage

Sharing

General

Target

3b1474590bd1c19b754b076467242865
Size

401KB
MD5

3b1474590bd1c19b754b076467242865
SHA1

52b3183a91d1aa2dd4bcbfa4fa55251bdd1c73a8
SHA256

73fe6ed0f606b685ffedfc36e5fa5a533642660beb0f90b19ad2c46145e12178
SHA512

c831cd3786d420a589679a37cdbd3a572e6a2ea5ab7b2e3e959449e30ece0cfc2fef6990f5cfbdd8ded57c39540ef4582b139952c2550a4cc4ce92bfe8c2c8a5
SSDEEP

6144:unw4vSzQKJzc/0yyfUQ60x3E95sfXruEKqow2Ukqp33CwHzKpNuD7JFAN:B4vSH1c/0VUrH5sfb2q1uqp33NzK47f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b1474590bd1c19b754b076467242865

Files

3b1474590bd1c19b754b076467242865
.exe windows:5 windows x86 arch:x86

d45469d1e5d50cf3498a3ca002040246

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_atoldbl
_mbsdup
_local_unwind2
_osver
__setusermatherr
_strnicmp
modf
_finite

advapi32

InitializeSecurityDescriptor
SetFileSecurityA
LookupAccountSidW
QueryServiceObjectSecurity

kernel32

GetStartupInfoA
CancelTimerQueueTimer
SetConsoleCursorMode
ReadFileScatter
VirtualProtect
WriteConsoleInputW
GetBinaryType
ReadConsoleInputW

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 573KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ