3f21bb14f38da63cc64efbb724861d87 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f21bb14f38da63cc64efbb724861d87
Size

38KB
MD5

3f21bb14f38da63cc64efbb724861d87
SHA1

85e2de780e3c7bf10b17b88bc0a1778a46918658
SHA256

eb73791323a3f2b4aabd2cc99f321397270111837497b592fba9d7368b030976
SHA512

6a2956abb93434da5f47446eb4b767f6acfb7c49f1ac28111a56a8264eebfaa1f3a93becccbeaa57f885c6b248a8e558073f702d61a77387a22c105e69817b59
SSDEEP

768:zF2t/RYc9XGFEwAvq3lqSZZ8ArLjpJyOS5PwTL+xBuEdCIl6T:Z2t/RESdCwiOAlEiL+xBuEd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f21bb14f38da63cc64efbb724861d87

Files

3f21bb14f38da63cc64efbb724861d87
.exe windows:4 windows x86 arch:x86

04732912e723f2daf51104b175cba2e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CharUpperBuffA
MessageBoxA

kernel32

WinExec
lstrcmpA
lstrlenW
GetModuleHandleA
lstrlenA
CreateThread
ExitThread
CreateFileA
GetVersionExA
VirtualProtect
lstrcpyA
ReadFile
CreateFileMappingA
VirtualAlloc
GetFileTime
SetThreadPriority
GetLastError
Sleep
GetTickCount
DeleteFileA
lstrcmpiA
GetLocaleInfoA
TerminateThread
VirtualFree
SetEndOfFile
SetFilePointer
CloseHandle
WideCharToMultiByte
MapViewOfFile
GetProcAddress
WriteFile
ExitProcess
LoadLibraryA
lstrcatA
GetFileSize

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_INIT_
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE