3cfee0a92725ac8a7566a44e1da5f171 | Triage

Sharing

General

Target

3cfee0a92725ac8a7566a44e1da5f171
Size

132KB
MD5

3cfee0a92725ac8a7566a44e1da5f171
SHA1

1fe92df35d50e224e515fa88fb7cbb21264c94d8
SHA256

cb7221c10137348f87d879f44fe9c91624aa6e11ec5425a43f5a9c2a1360f47a
SHA512

b9abfad85aa3fbf688f0a9b57cb29be931897da51cdd6d0e3e849dba40f9fb1ddd60dd70b906c3d946dcddc73489f84f8da5c2845f84daf3430d4cc18e5a7e63
SSDEEP

1536:PMe/YfYwORMwtdk/XjBEQKc715hBVWTnJasT4to9+dpnN2NVTaGyfbbjpaJ:PMcD9RztdslEgZ5DwT4GrMnSV8fzkJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cfee0a92725ac8a7566a44e1da5f171

Files

3cfee0a92725ac8a7566a44e1da5f171
.exe windows:4 windows x86 arch:x86

da3216e9b419357acae849e6938f110d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GetLastError
LoadLibraryA
GetCommandLineA
GetACP
ExitThread
GetModuleHandleA
GetCommandLineW
LoadLibraryExA
IsBadHugeReadPtr
GetModuleHandleW
IsBadReadPtr
ExitProcess
GetProcAddress

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ