3da4789c2eb67e04695ede08b01bce92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3da4789c2eb67e04695ede08b01bce92
Size

2KB
MD5

3da4789c2eb67e04695ede08b01bce92
SHA1

929fa90cc6ff6aa4fb633b7c6660bbf58c3de758
SHA256

70e667b9fb244f1ebe4957409e0219eccd8ac29fff76d080ba0f8449b874cd80
SHA512

95b9569fe828a0d6dbce1ac95be8d97f489b4ccd3e581648943b081b3cb680213afdcff765eae7d562fe8b5149458a0d4b71f1e34022ea997e3053a46d3cc47b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da4789c2eb67e04695ede08b01bce92

Files

3da4789c2eb67e04695ede08b01bce92
.exe windows:4 windows x86 arch:x86

faf7a7fd493d47fd28ef16d14c05ad0d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GlobalAlloc
ReadFile
GetModuleFileNameA
WriteFile
lstrcatA
ExpandEnvironmentStringsA
CreateFileA
SetFilePointer
CloseHandle

advapi32

RegOpenKeyExA
RegCloseKey
RegSetValueExA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 173B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE