3dd27b4feee9b0c14046121e357fca19 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3dd27b4feee9b0c14046121e357fca19
Size

185KB
MD5

3dd27b4feee9b0c14046121e357fca19
SHA1

4199356b9bb5a92fd5b8f0daafe1905abd1c9d07
SHA256

dc3cbc49c7718ce42068fe8755c16afd03cf4d7ffca0f54bc5baa927710fbbb9
SHA512

a31a1f8dc80a6f0b76e78a047f7885d7fad7f0dfc808afc595a20bc939676d85e0fd0f0684ef3cc11df7d0f4600418ff9e919509d28503777e1f8a7db692942e
SSDEEP

3072:6wvpi0GurTauirpfbug+tNczBn65j7jTuOs0Fmux6khq3RXtTJWun4DPv9lyph40:6whi01Yig+tNvLTJDphqhXtr4DHWf44

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3dd27b4feee9b0c14046121e357fca19

Files

3dd27b4feee9b0c14046121e357fca19
.exe windows:4 windows x86 arch:x86

397865c786c4c8766a601cbd893174f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

Sections

.text
Size: 155KB - Virtual size: 468KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE