3f2da968330508d24b6453759b7ca0e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f2da968330508d24b6453759b7ca0e8
Size

384KB
MD5

3f2da968330508d24b6453759b7ca0e8
SHA1

128651e7c89dacfedcfa3de08054eeef91ba0632
SHA256

72ad95d27c9bfb1faf508c1375b228a42439deee97a4f398c4dd954b61c4bb9f
SHA512

c05f853ca50880bb0a81a8a34bb0b319b6dcc370e40594d9ddadc0ac6366ebf7014a3b85ee1144d1b0e4d6a29b9a99d99b8e264448e549778c13d6c80dd1fe2f
SSDEEP

6144:uNtLZRv55G5ke9MRs0On1SIFs7Bqwtj9kJ8c0IITjZ0N7/cYL9duz4hwOUu808OG:IzR5GdCs0O1BkBqwtjFc0fTjZOT59oz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f2da968330508d24b6453759b7ca0e8

Files

3f2da968330508d24b6453759b7ca0e8
.exe windows:4 windows x86 arch:x86

faf57c3354f72d38913bc100499411dc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
LoadLibraryExA
LocalFree
GlobalLock
GetConsoleCP
IsDebuggerPresent
HeapCreate
FindClose
GetLastError
IsBadReadPtr
FreeEnvironmentStringsA
CloseHandle
GetACP
LocalUnlock
CreateFileA
DisconnectNamedPipe
CreateFileMappingA
GetStdHandle
GetModuleHandleA
CreateEventA

user32

DefWindowProcA
CreateDialogParamA
GetDlgItem
DispatchMessageA
ScrollWindow
EmptyClipboard
GetDC
GetMessageA
PostMessageA
SetFocus
GetIconInfo
EndDialog
IsWindow
DrawIconEx

uxtheme

GetThemeMetric
EnableTheming
GetThemeColor
CloseThemeData
DrawThemeIcon

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ