3c91db52d0fbe66d83e68a2cd8d760ea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c91db52d0fbe66d83e68a2cd8d760ea
Size

127KB
MD5

3c91db52d0fbe66d83e68a2cd8d760ea
SHA1

01425171b4fbb8225665ac6ccfb4637fb5f28198
SHA256

86a84a934af8072b5517cdb78809e233098b6e80db8dfaa56e0c3b0e25842430
SHA512

da00e5cf8383f57f56fffbeb55d3f98e8b6a04cb6cfb81ded7bef2eff6ed95fa5c68301eb73e12d614527bc186951b06e23b67a52522b449f0a0f72643847003
SSDEEP

3072:vzh/+sPuiY1Bnc7yPXCN1V2KAuZOumj0TF5LmTh2rT/ymakfOkLf2:1+sWiYTnJPyNT2AH/58t+W6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c91db52d0fbe66d83e68a2cd8d760ea

Files

3c91db52d0fbe66d83e68a2cd8d760ea
.exe windows:4 windows x86 arch:x86

2dc7ed5482d2f48dd8bf9f122372dfed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DrawEx
ImageList_GetImageRect
ImageList_SetFilter
InitializeFlatSB
DrawStatusTextW
DllInstall

kernel32

CreateFileA
ExitThread
ExitProcess
CloseHandle
CreateThread

Sections

.text
Size: 73KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE