3d677617aeb7b18953decf22c4caaf20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d677617aeb7b18953decf22c4caaf20
Size

5KB
MD5

3d677617aeb7b18953decf22c4caaf20
SHA1

ce608fe610898e848b83e26ce4405d454cbda6e2
SHA256

2c7711fefeea87eebe9ccbeea0b78dcdd1972902ac69e3534e6e83b3c7b8c929
SHA512

231c48215eaa7e727a7b19a1d2f4e1c887663da099b487f938fde18f1ce6f1572f7fa8fa2cb010b356a3c29fddb3a2cc1485a9445b8b5de93df4cc78b4832fbf
SSDEEP

96:e8SSkEY/7H80nCYNNJNiKZ5jRO+pzfdaKy8tffovRVDawEZE:5QpCQH9IGzfwKntffyRVD+ZE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d677617aeb7b18953decf22c4caaf20

Files

3d677617aeb7b18953decf22c4caaf20
.exe windows:4 windows x86 arch:x86

fb196294d3066f4affb09b8e2d319106

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionNamesA
EnumResourceNamesW
FatalAppExitA

user32

SendMessageCallbackW
LoadMenuIndirectA

gdi32

GetCharacterPlacementA
TextOutA
CopyEnhMetaFileW
GetTextExtentPoint32A

Sections

.masm
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ