3bc38503b561990d29ef882c886a13d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bc38503b561990d29ef882c886a13d2
Size

22KB
MD5

3bc38503b561990d29ef882c886a13d2
SHA1

35d591f07a4589f6fa2b1a342a16a71cf55bc5c0
SHA256

39ee9f9bd0ac34a1ce9f2bfb2e0bbc0db3d12f6d0b20fd23b4f4cad2f9ad9abb
SHA512

ccb4c3fffdc21502a09ef6b621cae22f96109574f3baa57e329b2387f60af395e2d4cc701a12014a16ebbcb6492b6928dd7529456df03f55ade9b5c5a2a0dbe7
SSDEEP

384:TzEnmrYlDmtKU6srABc+u/x3pG0t8/T7iHs:fEnl4t9AW/x54iM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bc38503b561990d29ef882c886a13d2

Files

3bc38503b561990d29ef882c886a13d2
.exe windows:4 windows x86 arch:x86

cbff739b9ad20e547df480a38c427485

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
CreateMutexA
ExitProcess
FindAtomA
GetAtomNameA
InterlockedIncrement
ReleaseMutex
SetUnhandledExceptionFilter
Sleep
WaitForSingleObject

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_fileno
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
printf
signal
strlen
strtoul
system

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 96B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE