3f3f491f3919aa36bce8f303f0fd79d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f3f491f3919aa36bce8f303f0fd79d5
Size

178KB
MD5

3f3f491f3919aa36bce8f303f0fd79d5
SHA1

d3c8c1951958b949431c0933baad3a077f1b1381
SHA256

1246d78f747d86f483d074384ac0a597e5f474c1efd5089f1c73c74652e943a1
SHA512

2ec2e67f56b286235a0c247f56850ec45bfd14ba87ceeb0361c1e90d945feb1f0d32f036860ee2128dd7c13bf3f8dc196f997efe2fe98ac61e0d89e333ead923
SSDEEP

3072:tB2IoMjTmz6csNZQ2VG3MT7iujG41N7gowoqXhpJmxA5f4yFY4K6XUVrko/v5:v7QOGAOE1N7v7uL4AN4yHfUV4o/R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f3f491f3919aa36bce8f303f0fd79d5

Files

3f3f491f3919aa36bce8f303f0fd79d5
.exe windows:4 windows x86 arch:x86

19e896eca998687d7fb66a85d45d68c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
UnmapViewOfFile
FindFirstFileA
MapViewOfFile
EnumResourceNamesW
OpenWaitableTimerW
DuplicateHandle
FindResourceExA
GetModuleFileNameW
FindClose

advapi32

RegOpenKeyA
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegSetValueExA

shlwapi

PathFileExistsW

shell32

Shell_NotifyIconA

rpcrt4

NdrFixedArrayFree
UuidCreate

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ