3d8611ad9dfd41e44d5aeac701aa9108 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d8611ad9dfd41e44d5aeac701aa9108
Size

48KB
MD5

3d8611ad9dfd41e44d5aeac701aa9108
SHA1

8e7fca048faa5647d91f080fcca82dc894718550
SHA256

73edaa273d2688ba9ed14c46f4ede4e0fd8985b5cf86290998d86ee5a27b734f
SHA512

a4793d45925d949dd8513a6ebf0a34a2fcfbefccb066959ce952d11bd94e8df832f3bc509f6e02804f536f53f6a684769511298c89fe62db7f6870e0321e37d8
SSDEEP

1536:hPxlWYJlS98rX2i4iT7keMoMw407ltDI:38gtLb8k40xhI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d8611ad9dfd41e44d5aeac701aa9108

Files

3d8611ad9dfd41e44d5aeac701aa9108
.exe windows:5 windows x86 arch:x86

1d7c0dc0eb8ec0b8d66afa720f9a9eac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyA
StrStrW
wnsprintfA
wvnsprintfW
StrCmpNIA
StrCmpNIW
PathFileExistsW
wvnsprintfA
PathMatchSpecW
PathFindFileNameW
wnsprintfW
PathRemoveFileSpecW

advapi32

RegSetValueExA
CryptAcquireContextW
CryptDestroyHash
CryptHashData
CryptCreateHash
RegDeleteValueA
RegQueryValueExA

kernel32

lstrcpyA

Sections

.perat
Size: 39KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ador
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rcf
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ