3e0cbcc1dab7ddcfed6d10751e40543b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e0cbcc1dab7ddcfed6d10751e40543b
Size

47KB
MD5

3e0cbcc1dab7ddcfed6d10751e40543b
SHA1

5480bed50e8ca464e7573706c43f9933ea4fa613
SHA256

352747df5d21da0c777dd711910bccc4509ce75e1b6fcc6598fe4ff15120af62
SHA512

65764fa6fdc73fbe825723f49d771d9f0e788c227c9f2c37c0daa59c08ab77615b90979a47383b01c9d91c79013ce792db22d82e9c84c3e2ae5cb44515964f7f
SSDEEP

768:cqzd48WNNO462Psz5Ruvp5izA7+EhTa4Aib0Q0KLf3:c6Gxo2P+Ru0UR6KL3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e0cbcc1dab7ddcfed6d10751e40543b

Files

3e0cbcc1dab7ddcfed6d10751e40543b
.exe windows:5 windows x86 arch:x86

a7528f15e5ac1576b76564ce6a494f3a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
HeapSetInformation
SetEndOfFile
DeleteFileW
GetACP
LocalReAlloc
GetFileInformationByHandle
GetProcessHeap
HeapAlloc
HeapFree
GetUserDefaultUILanguage
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentThreadId
GetModuleHandleA
WideCharToMultiByte
GetStartupInfoA

gdi32

LineTo

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ