3bb32a0fe6f07b8f6cf07c91b7d17a7f

General

Target

3bb32a0fe6f07b8f6cf07c91b7d17a7f
Size

440KB
MD5

3bb32a0fe6f07b8f6cf07c91b7d17a7f
SHA1

8670eda360c3987f763990341e3581fc6961e706
SHA256

566f86ccd97dbd8140bae6fdab841284081e1e04d158c3f56bf98e16dbf4cab7
SHA512

39dd6c41d112f9557d24d26f27bbc1dda7e139986712f04d97f72ddbb449f63627427e7be9a2cb383e00f2660b3340fe624f6616f8f1745934a6fba115c2139a
SSDEEP

12288:onqaC2Yfe8PI3nDaNOKVHCSxAZM+OqN2BI:onO/feh3nDKViY+Oq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bb32a0fe6f07b8f6cf07c91b7d17a7f

Files

3bb32a0fe6f07b8f6cf07c91b7d17a7f
.exe windows:4 windows x86 arch:x86

37ff8d512f20fc5fee068f7d8e6f728e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtSetEvent

kernel32

ExitProcess
FreeConsole
GetCommandLineA
GetStartupInfoA
GetConsoleMode
GetLastError
DuplicateHandle
QueryPerformanceCounter
GetUserDefaultLCID
ReadFile
MapViewOfFile
SearchPathW
MultiByteToWideChar
LoadLibraryW
GetCurrentThread
InterlockedCompareExchange
LocalReAlloc

comctl32

ImageList_Create

advapi32

GetUserNameW
RegEnumKeyW
RegSetValueExW
RegOpenKeyExW
OpenThreadToken

user32

KillTimer
DispatchMessageW
GetDlgItem
EndPaint
RegisterClassW
SetWindowPos
GetClientRect
GetThreadDesktop
WinHelpW
SetFocus
IsWindowEnabled
SetWindowLongA
MapWindowPoints

gdi32

SelectObject
CreateFontIndirectW
SetBkColor
SetTextColor

ole32

CoRegisterClassObject

msvcrt

__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_controlfp
__dllonexit
_except_handler3
__set_app_type
__p__fmode
_onexit

Sections

D
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 332KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.arch
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

37ff8d512f20fc5fee068f7d8e6f728e

Headers

File Characteristics

Imports

ntdll

kernel32

comctl32

advapi32

user32

gdi32

ole32

msvcrt

Sections

D Size: 12KB - Virtual size: 10KB

.rdata Size: 332KB - Virtual size: 330KB

.data Size: 4KB - Virtual size: 210KB

.arch Size: 84KB - Virtual size: 80KB

.reloc Size: 4KB - Virtual size: 1KB

D
Size: 12KB - Virtual size: 10KB

.rdata
Size: 332KB - Virtual size: 330KB

.data
Size: 4KB - Virtual size: 210KB

.arch
Size: 84KB - Virtual size: 80KB

.reloc
Size: 4KB - Virtual size: 1KB