3cad9f31bdb8b454b6d354189056790a | Triage

Sharing

General

Target

3cad9f31bdb8b454b6d354189056790a
Size

23KB
MD5

3cad9f31bdb8b454b6d354189056790a
SHA1

37622cadac68340cc29e097b8d21de45ae2169d3
SHA256

48ef69ab3786c81a311363dee3c9abd847f4b3dd34bf44d2d1a9f770890741c3
SHA512

bd94582312efd036ac5043dc8ef9d531d70cb61e96e9b65df2f7c5666833a9f36d6ed3554ffb76977d4bfeaa884f2aaa83b7aadceebdb53234167ff161f5e07d
SSDEEP

384:Tsnegpk81LvnL1s8ABp/WZ+7cOuvPaFfB0Kc9rDZ0YWDBtGYoRIh0kuD:HgpPBQp/WZrnvPBzXBAtNYIs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cad9f31bdb8b454b6d354189056790a

Files

3cad9f31bdb8b454b6d354189056790a
.exe windows:4 windows x86 arch:x86

637a50568e1118fb7ab6e9a195e03071

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Module32Next
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetProcAddress
GetModuleHandleA
ReadFile
GetFileSize
CreateFileA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

_except_handler3
free
strstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
realloc

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ