3f58398c120fe64aae827eb8fb42da0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f58398c120fe64aae827eb8fb42da0d
Size

21KB
MD5

3f58398c120fe64aae827eb8fb42da0d
SHA1

2405e7fe0ed2a54ad8868063cbc002b8d45df694
SHA256

b3b4ba56e3b9623badc711b6402b67f64781aef0e0ae47be16fe9186038ffe91
SHA512

5bb5c2fd074b7c37f6db1371a70e923b2d37d75d579a632b6d07163b6a72ab3233849831a3fd9dc55dea735225f39ff1af6e6868310a12f9f6ccbb5af7c9b4c8
SSDEEP

384:5/E0pTFQXXFQ/S8Pkm/jBEbt50vVKTOtVXsecbmizXDhDROlnfWjvOeo:dE0pTFQHY/jBAt50v+Ot9seciizlD8ln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f58398c120fe64aae827eb8fb42da0d

Files

3f58398c120fe64aae827eb8fb42da0d
.exe windows:4 windows x86 arch:x86

6d728a3eec85332d3cdd0645c0bef608

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CreateEventA
WriteFile
SetFilePointer
CreateFileA
WaitForSingleObject
GetModuleFileNameA
LoadLibraryA
lstrcatA
CloseHandle
ExitProcess
ReadFile
lstrcpyA
GetTempPathA
GetFileAttributesA
GetModuleHandleA
lstrlenA
GetProcAddress
RtlUnwind
WaitForMultipleObjects
SetEvent
OpenProcess
Sleep
GetSystemDirectoryA
ExitThread
GetLastError
CreateMutexA
GetVersionExA
CreateThread
lstrcmpA
ResetEvent

user32

wsprintfA
DispatchMessageA
SetThreadDesktop
PeekMessageA
CreateWindowExA
CreateDesktopA
MsgWaitForMultipleObjects
DestroyWindow
CharToOemA
ShowWindow
CloseWindow
TranslateMessage

advapi32

RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegNotifyChangeKeyValue
RegOpenKeyA

shell32

SHGetFolderPathA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ