3cb00681ce9493cd940190e6465eb412 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cb00681ce9493cd940190e6465eb412
Size

56KB
MD5

3cb00681ce9493cd940190e6465eb412
SHA1

920d53cdc52dd02bfc98dca8ee30cfea05f66da0
SHA256

11120975be157c9e7002d7b3acd6bcfe291cd7f6cd16637c68b5c939e504051c
SHA512

6f57cf68a4e02f80177bf8c0705c4251e1f43e9e59b5246c23d834cc5a80939daec6601cfc40f237b596b0e0d5ba2fb52595a72cde0062e50690a8a0d506dcf5
SSDEEP

1536:auc8O7zLDxVjlFQcfy4YKgCtKpM6UiCTHSgy:aZLddl7MKgCj6UiCTHSgy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cb00681ce9493cd940190e6465eb412

Files

3cb00681ce9493cd940190e6465eb412
.exe windows:4 windows x86 arch:x86

535ff14c1e7f92c5aa458644ee921a94

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIcon
EnableScrollBar
EnableWindow
EndDeferWindowPos
DestroyWindow
LoadCursorFromFileA
OffsetRect
ShowCursor
DestroyCaret
CreateCursor
CloseWindow
IsCharUpperA
CharUpperA

kernel32

LocalAlloc
GetSystemTimeAsFileTime
EnterCriticalSection
lstrcpyA

Sections

.text
Size: 36KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE