3da9654ec1ec22c550381a6c4f46a187[.]exe | Triage

Sharing

General

Target

3da9654ec1ec22c550381a6c4f46a187.exe
Size

39KB
MD5

3da9654ec1ec22c550381a6c4f46a187
SHA1

e4acbdecf4f7837e020b8c6ba4ad946737f4e08b
SHA256

4b6c4e54cf20377cb092f91c15c5d8784e7538b18d82d95ebb4151ce6b471dd7
SHA512

c36b9b98a48f70a4021e0a0bc61077742cd5e09ec3d35897bbe82b21ad3e3b0f678b0f86f85b02dcfd970b3a799a7187445e463f05fef0f4b41a1d99d9d696d6
SSDEEP

768:lL6IJPmMEf9ue5tWfanplv3GrWZpWeaqF9o+oGtYaGFMRv7KuLsfhyW3s6mO6KcN:lLTsD9u4ca3GSeqF9xoFvF67KugEWA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3da9654ec1ec22c550381a6c4f46a187.exe

Files

3da9654ec1ec22c550381a6c4f46a187.exe
.exe windows:4 windows x86 arch:x86

9184367f8d1f9986888f0eed2e6f8bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
WriteFile
CloseHandle
CreateThread
CreatePipe
ExitProcess
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE