3bf99d1a2eb3b80c2903bcf0211b2af6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bf99d1a2eb3b80c2903bcf0211b2af6
Size

78KB
MD5

3bf99d1a2eb3b80c2903bcf0211b2af6
SHA1

b482da558819ad8e076ecd2dd931c30d267f5ddd
SHA256

a060b11d44a87f16ffae055ed4dc38de571bab6591a5183c33d17e9a0e36cccd
SHA512

17892326865d78cdd7f683940c211ae170a5cd723a64a5a625463694f839dbe166d93b6a36736c8ea5b1d5a5d3923ccb6edf997d4949b0733c4e5609d33f0d8a
SSDEEP

1536:72Sq2lRybBbht9nJXsRu20HrCS++yZnwclij7pODO:CT2P+BbhrnJcRjF+YlijtOi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf99d1a2eb3b80c2903bcf0211b2af6

Files

3bf99d1a2eb3b80c2903bcf0211b2af6
.exe windows:4 windows x86 arch:x86

3f42f49d6d6430c6e6f3264b860bf7d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputCharacterW
SystemTimeToFileTime
IsBadStringPtrW
GetComputerNameA
TlsSetValue
VerLanguageNameW
GetVDMCurrentDirectories
UnmapViewOfFile
LoadLibraryExW
IsDBCSLeadByte
UnregisterConsoleIME

user32

ReleaseDC
GetWindowPlacement
GetMessageW
CheckMenuItem
PeekMessageW
BeginDeferWindowPos
SetClipboardData
BeginPaint
SetWindowLongW
EnableMenuItem
ModifyMenuW
GetUserObjectSecurity
GetFocus

msvcrt

strncpy
_controlfp
wcscmp
bsearch
strncat
__p__fmode
fprintf
_isctype
_snprintf
wcsncmp
exit

ulib

??0CLASS_DESCRIPTOR@@QAE@XZ
?Sort@STRING_ARRAY@@UAEEE@Z
?NewBuf@DSTRING@@UAEEK@Z
?Strstr@MBSTR@@SGPADPAD0@Z
??0PATH@@QAE@XZ
?Cast@FILE_STREAM@@SGPAV1@PBVOBJECT@@@Z
?Put@LIST@@UAEEPAVOBJECT@@@Z
?SkipWhite@WSTRING@@SGPAGPAG@Z
??1FSN_FILTER@@UAE@XZ
??_7BSTRING@@6B@
??1COMM_DEVICE@@UAE@XZ
?IsYesResponse@STREAM_MESSAGE@@UAEEE@Z

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ