3d893c79d173623efa0c8e5ad5424050 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d893c79d173623efa0c8e5ad5424050
Size

2.3MB
MD5

3d893c79d173623efa0c8e5ad5424050
SHA1

49e4a3d9b3e5ef451d7e208bc790fff6049159b4
SHA256

e6e552c26748ddb1d80d75029fbb0727e5b8821d7615641368b0043e80bc191c
SHA512

2e22b3c929df9d04a55b13ac67e95d864366b86a9c5511d843343bd4d6d8ea387bf7998ac980407c9c98c6b8c14e7e8b9a9ca5d2447232990d911290ec5fa324
SSDEEP

12288:/IVnVnVnVnVnVnVnVnVnVnVnVnVnVnVnVnVnVnVnVnVnVnVnVb:/I111111111111111111111119

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d893c79d173623efa0c8e5ad5424050

Files

3d893c79d173623efa0c8e5ad5424050
.exe windows:4 windows x86 arch:x86

df19ae7900040b4ad59bb264fe3676f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetCurrentThread
LoadLibraryA
LocalAlloc
GetFileType
LocalFree
GetCurrentDirectoryA
CompareStringA
GetVersionExA
CloseHandle
GetVersion
GetSystemInfo
GetProcAddress

user32

EndPaint
GetFocus
GetKeyState
DispatchMessageA
TranslateMessage
BeginPaint
GetMessageA
CharNextA

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ