3e46b7a760b9c3f8a51eeb4dd355afa6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e46b7a760b9c3f8a51eeb4dd355afa6
Size

231KB
MD5

3e46b7a760b9c3f8a51eeb4dd355afa6
SHA1

f89d161eec876052e1bb82250098d8213aa7d14c
SHA256

e8c4c64d916c3335afa5b94ea27c4799d20d9d65576a33df1aa5a22481832a01
SHA512

dec264650ca670f25bbbd291fd1c000be18c74df64c33718b91f5a4614f3d4375741448e1eedc78ce1713273c4ac206ca47e452d9d71aac6fcad90311ad19a48
SSDEEP

6144:kE+pqYIKW7IeTCw4IZOoTpXORdjszSOY3fvtsjes:kHIYIYe1t1XkvJaje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e46b7a760b9c3f8a51eeb4dd355afa6

Files

3e46b7a760b9c3f8a51eeb4dd355afa6
.exe windows:5 windows x86 arch:x86

2f43e904b8a395d70705a0b389f859ff

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

QueryPerformanceCounter
RaiseException
GlobalFix
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
FormatMessageW
LocalFree
SetCurrentDirectoryW
GetACP

user32

FindWindowW
IsWindowEnabled
PeekMessageW
TranslateMessage
EnableWindow
LoadStringA
LoadStringW

crypt32

CertOpenStore
CertCreateCertificateContext
CryptDecodeObject
CertComparePublicKeyInfo
CryptExportPublicKeyInfo
CryptEncodeObject
CryptQueryObject
CertStrToNameW
CryptHashPublicKeyInfo
CryptHashCertificate
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore

odbc32

SQLFreeStmt

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ