3c38bd7d6f518a4eaf84c2c63a7e8e13 | Triage

Sharing

General

Target

3c38bd7d6f518a4eaf84c2c63a7e8e13
Size

20KB
MD5

3c38bd7d6f518a4eaf84c2c63a7e8e13
SHA1

69634f5899d6be2c606053305dde95b52c984976
SHA256

791061f6b9bbcef7b172596a306621f7f1db2f6910e4f308d0979c95741fd44c
SHA512

58ca18437c68ae4367077c2116024c4f21802ffb973377ea1f07fb030df3f48a00530bb1eda70b915d28025e51a086e86639802e13248196766175fe567b521c
SSDEEP

192:Wb9d8yp6avZLmwYP43Fe5F2sUvOJ7iVViWGXPVYEBSTvpAlqqUjXP1oyn:ShiP43QQOJ7iVVDGXPV7E+lqn71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c38bd7d6f518a4eaf84c2c63a7e8e13

Files

3c38bd7d6f518a4eaf84c2c63a7e8e13
.exe windows:4 windows x86 arch:x86

43e71cfe50c9654ca7febaf12c2cdb2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
GetModuleFileNameA
GetSystemDirectoryA
FreeLibrary
Sleep
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

user32

PostMessageA
RegisterClassExA
CreateWindowExA
ShowWindow
GetMessageA
TranslateMessage
DefWindowProcA
DispatchMessageA

msvcrt

atol
_controlfp
_except_handler3
__set_app_type
sprintf
rand
__CxxFrameHandler
fwrite
??3@YAXPAX@Z
__p__fmode
??2@YAPAXI@Z
fopen
srand
time
strchr
strncpy
fclose
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE