3dafa1a6c614f08bff851d4336cb4af2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dafa1a6c614f08bff851d4336cb4af2
Size

48KB
MD5

3dafa1a6c614f08bff851d4336cb4af2
SHA1

f3a54947a422ea6c8a7e4bcdbdf35736e6613186
SHA256

15f1a73876dfadc51bca0eec79dbc49dab3fe4b23cff34736377594703191d41
SHA512

170a3256b75747467242d137ee8df3b0f4a0f445965adf6cd78af08a090fc58d29c6ff80fc76f5897e932c211d88f968f1355223841d9f2818a67c0bacfac309
SSDEEP

768:jADMTuqKE91jP6GbC+1qE9cGYIWSQtyRgAcNrUjMf0cwP6rNB5BFatDq:RTSEbfm+AE9cPI/QgRgAcNtwINB70tDq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dafa1a6c614f08bff851d4336cb4af2

Files

3dafa1a6c614f08bff851d4336cb4af2
.exe windows:4 windows x86 arch:x86

a359299f874cb898424ffe422bb69045

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CreateFileA
SetCurrentDirectoryA
GetTempPathA
CloseHandle

shell32

ShellExecuteA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 547B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RPCrypt
Size: 717B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ