3d6cb2967c082def0cc0e11b6a947446 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d6cb2967c082def0cc0e11b6a947446
Size

52KB
MD5

3d6cb2967c082def0cc0e11b6a947446
SHA1

59adfd0b6d15e2bf70d7c543005577b4b791f6c0
SHA256

0e3523a7c30e2a3409a9a234d7c9e32e91b10c10838e7543b75c2bb07363bfba
SHA512

f90b032a90c75f91b9ca32f63abece68061e5194454dacd83798982f9d0676527610a742d68aa62778b62f07b920484c36f70dc7676ad1ac78a8bd42533942d0
SSDEEP

768:3n/oYXOdeDJxdejE+LDggNM0I9c0umJA8zLU684xHR7Y376AOgE5Px9MtH85TnRP:3n/oYXO43d4E+rNMFj7hRsWN1fo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d6cb2967c082def0cc0e11b6a947446

Files

3d6cb2967c082def0cc0e11b6a947446
.exe windows:4 windows x86 arch:x86

d1b1d470695815e5d2859c5f33b4954e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
FindFirstFileA
FindClose
FindNextFileA
FreeLibrary
HeapFree
ExitProcess
HeapReAlloc
HeapAlloc
Sleep
lstrcpyA
GetProcessHeap
GetProcAddress
LoadLibraryA
GetLastError
lstrcatA
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE