3effac64a01664f415979bd82deee7f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3effac64a01664f415979bd82deee7f3
Size

19KB
MD5

3effac64a01664f415979bd82deee7f3
SHA1

d346b0e657a63a9a8399fb3a0f62f7e7f379a48e
SHA256

221820101e4ccc79e6905fbbd1553880c7203666e1eb2ead0375f51f5cc215df
SHA512

4aba3f5d8c1a8d5ac84c2d81c7e0c7c6a50f576fb71a9faf4cb45885914153a5aa91464acd12e212d461a1d6c707eafcd88c377d6eaf22ec991b6bcf7fb4b643
SSDEEP

384:kfICNBiP+Jjjs6WQsnlFfaR77uUE+GyB/:kfRrJjTWxnlFCRPTF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3effac64a01664f415979bd82deee7f3

Files

3effac64a01664f415979bd82deee7f3
.exe windows:5 windows x86 arch:x86

5e4ae569848ef577db74a8dcdd8a03a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

kernel32

GetModuleHandleA
SetUnhandledExceptionFilter
CreateFileA
CreateMutexA
CloseHandle
CreateDirectoryA
SetEvent
GetOEMCP
GetFileSize
FindClose
FindFirstFileA
QueryPerformanceCounter
WaitForMultipleObjects
CreateEventA
GetLastError
FindNextFileA
InterlockedCompareExchange
GetFullPathNameA
Sleep
ResetEvent
ExitProcess
LocalFree
FormatMessageA
ReadFile
VirtualAlloc
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

user32

CreateWindowExA
EnableWindow
GetSystemMetrics
wsprintfA
MessageBoxA

oleaut32

VariantClear
SysAllocString
VariantInit
SysStringLen
VariantChangeType
VariantCopy
SysFreeString
VarUI4FromStr
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ