3b0c88b33afaeb41b7e7fa6479a9d68f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b0c88b33afaeb41b7e7fa6479a9d68f
Size

77KB
MD5

3b0c88b33afaeb41b7e7fa6479a9d68f
SHA1

c67e4e7fbf0c0bcf75c8ca9b093f6f4151f30068
SHA256

a85961fa25e389b78087d6d7fcba75dea11d750e98c3092f199d55e0c513bc2e
SHA512

54c261c0ebd8a36934e849822faeee1a26166ea1e73865666fe18a7d2c101694a442870dca662d3d086d9ac783c1e6065568cfb7cbf6885f223b3a304a444859
SSDEEP

1536:RzOEWXGYkDbMYh2YdP9sp5jXHzWw5InnSWNhIkdKjaPejLaigY3:RzOXXED4n1jDWwlZ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b0c88b33afaeb41b7e7fa6479a9d68f

Files

3b0c88b33afaeb41b7e7fa6479a9d68f
.exe windows:4 windows x86 arch:x86

1b51904180dbc4099bf824bcb96f9155

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

GopherFindFirstFileA
GopherOpenFileW
FtpGetFileW
FreeUrlCacheSpaceA
HttpQueryInfoA

user32

DrawIcon
DestroyCaret
FillRect
GetActiveWindow
GetMonitorInfoW
GetShellWindow

advapi32

ReportEventW
RegFlushKey
DecryptFileW
ReadEventLogW
OpenThreadToken

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE