3e81e8c03edd84791338fca15d49183a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e81e8c03edd84791338fca15d49183a
Size

10KB
MD5

3e81e8c03edd84791338fca15d49183a
SHA1

7583625ef51c81e3d6907d9d2c99eff176c23a61
SHA256

1d46ba9854dbca8f4bf4f5fbbc53feb1fe52805fdced47bfbefb2c02713632bf
SHA512

99b80462acea32f3e43f01a9c99d212dbaf7a3c7a4f4e1e628e58a8d9dfbca175768338f8fbb40d7c4b0927ca2bb6a7d8d70d421de0a4f90f6de94b5d0866ac2
SSDEEP

192:m3mN4efLt9BlabGZcojGtNK6QsJDhaWP+BIXFuS0fxeP3TmBj:m26QL36XojsNK6QsJDvLudfxuqBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e81e8c03edd84791338fca15d49183a

Files

3e81e8c03edd84791338fca15d49183a
.exe windows:4 windows x86 arch:x86

3f9fb66c4515665b0ab7d2ef9f87b099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
CharLowerW
DrawTextW
ShowWindowAsync
DragObject
GetAltTabInfo

kernel32

GetLastError
VirtualProtect
GlobalAddAtomW
WriteConsoleOutputCharacterA
HeapReAlloc
PostQueuedCompletionStatus
GetConsoleAliasesLengthA

gdi32

TextOutA
RestoreDC
GdiEntry12
SetMetaFileBitsEx
SetBrushAttributes

Sections

.text
Size: 3KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE