3d685158fce70f0c85b5c605f9c29a0b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d685158fce70f0c85b5c605f9c29a0b
Size

244KB
MD5

3d685158fce70f0c85b5c605f9c29a0b
SHA1

3ab9ae3f949fa4486e6ee3463fad2ded20d4063c
SHA256

299108aeb5bfb2c9c495929b7506cfe816878a1889999ada4296164dd339d368
SHA512

a5a8c064a98c7a85700151a48760119447a6b416b4360f74309d6f84498ccab11b66480931c02e0627e2bb321df3984065534037e695c27df9f1a8adef5af04c
SSDEEP

6144:ODIEVqw0ioAmQjPbcSQubQ3Lc5MUAVSc+EWLR:OcUqw0ioAmXSQubQB0+WL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d685158fce70f0c85b5c605f9c29a0b

Files

3d685158fce70f0c85b5c605f9c29a0b
.exe windows:4 windows x86 arch:x86

5aee71c19e7e39e10384d90fe0f4d162

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapValidate
VirtualProtectEx
GetTickCount
GetConsoleCursorInfo
lstrcpyW
GlobalFree
SearchPathW
GetEnvironmentVariableW
GetTimeZoneInformation
Sleep
EscapeCommFunction
AllocConsole
VirtualProtect

user32

CharUpperA
GetMenu
GetCaretBlinkTime
ClipCursor
GetWindowContextHelpId
DeregisterShellHookWindow
GetClipCursor
SubtractRect
GetKeyboardState
GetTopWindow

gdi32

GetDIBColorTable
CreateBrushIndirect
CreateColorSpaceW
SetSystemPaletteUse
CreateCompatibleBitmap

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 890B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data0
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE