3c8f6cfa9f10104a5187a1c026df2393 | Triage

Sharing

General

Target

3c8f6cfa9f10104a5187a1c026df2393
Size

68KB
MD5

3c8f6cfa9f10104a5187a1c026df2393
SHA1

67bcbe17f9e37c151e9a42ad8a1f357c0a033c51
SHA256

9aadd5825124d75c1e4fb4090c0062f8e1b2ad239f606ead39bf483e6eebdcac
SHA512

008c1dcdbc4d46820ee8b1fa89f4b94bb5fb3ff79e2f0d72a6fee02c10cffcc73882f3cc991d03c04265e737a780d55817719f5643ec3ef9525ffef2585fc167
SSDEEP

768:NjcVhWSr8szyJBXUkyzf0/wuArfYwOM1H2dtcPVON1ykhcTga4yfKbNgzdr5qglD:i4lJBXpd/nArfY3M+Py/Cc3ValvnRCj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c8f6cfa9f10104a5187a1c026df2393

Files

3c8f6cfa9f10104a5187a1c026df2393
.exe windows:4 windows x86 arch:x86

de02015cceda1af9860a4e07d9750fcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
printf
atol
memset
srand
rand
strlen
malloc
strcpy
__setusermatherr

kernel32

GetStartupInfoA
ExitProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetCommandLineA
CreateProcessA
lstrcmpA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mfkxmii
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE