3b99e313a6b46db2259440512795e173 | Triage

Sharing

General

Target

3b99e313a6b46db2259440512795e173
Size

112KB
MD5

3b99e313a6b46db2259440512795e173
SHA1

a49e2396bd62aabf744d9bfe27813a9e9e07cc14
SHA256

47be94e725cabadfb333e028cd54bd3ef15733913655f0e3338f612fc8001de6
SHA512

f60493fbd74b755a0d1186f0e23a8f4c5a29a712f13adb2483c582d95fdbf3b686b2668e06695d87b9834732fd1ab78d010748ed5e4b4fb370f107836019138b
SSDEEP

1536:XDe0jlgKUhoiMF7mTDiRFyssxHGPH9y/bSe1j36LJ:i0+JU6TKF7sx1jZJA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b99e313a6b46db2259440512795e173

Files

3b99e313a6b46db2259440512795e173
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ