3bedde5986d615bdfd63aab0e7bd4982 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bedde5986d615bdfd63aab0e7bd4982
Size

1.1MB
MD5

3bedde5986d615bdfd63aab0e7bd4982
SHA1

cf0406d8cf9632c70d4b0e9cdbb700c629728a84
SHA256

53ee4d6452adc5b51510ca64e5a1af1439a5446fa6aa6cd7104c3ff24cbaaa71
SHA512

0eb97e3cbe35d8d60e887e2f71351e93a1b2bc6a6e6ec08749a1cf1ce61d0ba6680a0fa7c0ac4fa5e59b7d0292a1ab6314ab659dd22f8c5022de3c5bdef3c62e
SSDEEP

24576:q+9tWbM4LoSEzCgjV1HPbNCBtegaFGFYFyCJJa4o:qlbM2ZmVZPbILUYFYFyCJJzo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bedde5986d615bdfd63aab0e7bd4982

Files

3bedde5986d615bdfd63aab0e7bd4982
.exe windows:4 windows x86 arch:x86

998383a0d3eee350ddb8b84d1cee40d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
GetUserDefaultLCID
GetModuleHandleA
GetCommandLineW
GetCurrentProcess
GetTickCount
GetCurrentProcessId
GetSystemDefaultLCID
GetSystemDefaultLangID
GetCurrentThread
GetCurrentThreadId
GetCommandLineA
HeapAlloc
GetProcessHeap
SetLastError
GetStringTypeW
Sleep
IsDebuggerPresent
WriteFile
SetUnhandledExceptionFilter
GetOEMCP
GetFileAttributesA
FindClose
GetModuleFileNameW
UnmapViewOfFile
GetCPInfo
EnterCriticalSection
CreateProcessA
InterlockedDecrement
FreeLibrary
WideCharToMultiByte

Sections

.text
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ