3ebb51944fe87695889e68f42f9032d4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ebb51944fe87695889e68f42f9032d4
Size

86KB
MD5

3ebb51944fe87695889e68f42f9032d4
SHA1

a7a78def5b91ebb6383e66d11a10dffbb19120d4
SHA256

3fd9eef861d173da289a7ab8caf7ee54a5648e30c7d5068794ba6012221dff6a
SHA512

72dc4af9ed3f3560e2bdc145a35a53e39e189cedd8766e5f7f4cc467f88eb28d7b958dc4396530b910e3de42c897699630c6335d7b6e9d00b62da7b2cab9c1e5
SSDEEP

1536:C9s4HMgQzfWrrDNhLGrI2hhhKEEEEEEE0EEEEsc8WrXS:SrHKzq5hLtEEEEEEE0EEEEUMi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ebb51944fe87695889e68f42f9032d4

Files

3ebb51944fe87695889e68f42f9032d4
.exe windows:4 windows x86 arch:x86

a1a1ac694cda23f1f1edf2b96521293f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetComputerNameA
lstrcpyA
CreateFileW
PulseEvent
LocalFree
FindResourceW
lstrlenA
LoadLibraryW
SetLastError
GetCommandLineA
HeapCreate
GetCurrentDirectoryA
CreateProcessA
Sleep
UnmapViewOfFile
CloseHandle
GetCurrentThreadId
GlobalUnlock
GetModuleHandleA

user32

DrawMenuBar
GetDC
DispatchMessageA
CallWindowProcA
CreateIcon
SetFocus
GetCaretPos
FillRect
IsWindow
CreateWindowExA
DrawEdge
CheckRadioButton
GetDlgItem

cryptui

CryptUIDlgCertMgr
CryptUIDlgSelectCA
WizardFree
CryptUIDlgSelectStoreA
LocalEnroll

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE