3f499516805a1f041a66cfa11fe00680 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f499516805a1f041a66cfa11fe00680
Size

21KB
MD5

3f499516805a1f041a66cfa11fe00680
SHA1

953c99de43fc11a9c633c05c61550c83935b9c11
SHA256

0e607a90aea14f7b68263356e52c6e42e0a5e7b66696e17ce1161eca1c551d08
SHA512

8ce06afb49da92c0543179dbe2b4edc2bb20cd2426dda66ecefea305bf30fc2be203bf0ab09136071c1866218643a87fad9d3fdf70864ae71571c598bd4c4fee
SSDEEP

384:ARWqpcNZEyMlTYUdvPbHhYhAkmMwUNysx3OhQ:AR5c0BlJhbm3Htxe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f499516805a1f041a66cfa11fe00680

Files

3f499516805a1f041a66cfa11fe00680
.exe windows:4 windows x86 arch:x86

c494458029910d0ed6df63da0b05bbd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ