3c722e7d4b53076a64c7c44d4b3b8dcc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c722e7d4b53076a64c7c44d4b3b8dcc
Size

3.2MB
MD5

3c722e7d4b53076a64c7c44d4b3b8dcc
SHA1

96f0d619cb7710082a846fda514c259a7a2b23b8
SHA256

c7220c905f071ef7fabfd174a90ebc91f0e0a34f1ef96be1bf2c74a0798d5348
SHA512

b00a4a6b865a3388c7685ae70c2c47c0a866c55afc22ad3fde6cea98ea6f92dd04184a1039957746117f6705ee2a92f0a21a938804633206afd2de3d561b3bb2
SSDEEP

98304:afS4fP3cF0qQpzMMk9liCa37LrAGUcOI:GS4DJMMk9chns

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c722e7d4b53076a64c7c44d4b3b8dcc

Files

3c722e7d4b53076a64c7c44d4b3b8dcc
.exe windows:4 windows x86 arch:x86

94f8a8d67883e62ceb49b46aefe50d1e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

Sections

.MPRESS1
Size: 3.2MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE