3ed191bba836efe79c00f3573386bbf0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ed191bba836efe79c00f3573386bbf0
Size

390KB
MD5

3ed191bba836efe79c00f3573386bbf0
SHA1

82bb27ac25dd96ed7ed225094ed88f2acbf7927c
SHA256

6b47c318005efe9d5e9ad480d3ecda8c39915d86ea49ff19ed5d3b274176e9dc
SHA512

d9c01ab3e0aca1b92f3f763ba558206bb9222008d0f28ab507c6b49fe51bc18131a1f912eb557cc421877d425098afb5b14a0a23f63bbb81dddc54d63c25786d
SSDEEP

12288:BMCTYNxsQbwneGs9Q7LPV+URm1cOrIF+AfWFh:ZUNxsZneR4PVhRmmFYAf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ed191bba836efe79c00f3573386bbf0

Files

3ed191bba836efe79c00f3573386bbf0
.exe windows:4 windows x86 arch:x86

9ecbc9664c8259135ce9d6efa9461e99

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
GetCurrentDirectoryA
GetComputerNameA
FindClose
GetModuleHandleA
GlobalUnlock
SetLastError
CreateFileW
lstrcpyA
CloseHandle
FindResourceW
CreateProcessA
LocalFree
LoadLibraryExW
GetCommandLineA
PulseEvent
HeapCreate
GetCurrentThreadId
UnmapViewOfFile
Sleep

user32

CreateIcon
DrawMenuBar
IsWindow
CallWindowProcA
CheckRadioButton
FillRect
CreateWindowExA
GetDC
GetDlgItem
DispatchMessageA
DrawEdge
GetCaretPos
SetFocus

rsaenh

CPGenKey
CPDeriveKey
CPDecrypt
CPSignHash
CPHashData

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 363KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ