3f779cbd793bb0b2d61e5925953ef474 | Triage

Sharing

General

Target

3f779cbd793bb0b2d61e5925953ef474
Size

204KB
MD5

3f779cbd793bb0b2d61e5925953ef474
SHA1

9102cb5747aaa47fe162714026a21251fe215770
SHA256

1488eb28612b1110c7062e85a2053f4f4d6ee6eb0260767e9f55189a15f17b2f
SHA512

f98e33086f1a94524eff4b5265ec5dc7421e48daccf0220b36abbb960961864cd13dd8cea9a0affb465faba143730926d51328412a5172de3d251c696d0d6158
SSDEEP

6144:4lIuNb9o9yWokqP4kYajPWf14/AK9PyPjV:jW9FWovPGajPIJUP6V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f779cbd793bb0b2d61e5925953ef474

Files

3f779cbd793bb0b2d61e5925953ef474
.exe windows:4 windows x86 arch:x86

e6a9de54946a0528b2e103ec7e8a1235

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrlenA
GetConsoleTitleA
GetTempPathA
GetCurrentThread
FindAtomA
DeleteFileA
lstrcatA
ExitProcess
CreateProcessA
WriteFile
GetLocalTime
GetTempFileNameA
lstrcpyA
GetShortPathNameA
GetModuleFileNameA
MoveFileExA
MoveFileA
GetModuleHandleA
GetSystemDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateDirectoryA
SystemTimeToFileTime
CloseHandle
GetTickCount
SetFileTime
lstrcpynA
GetStartupInfoA

advapi32

RegSetValueExA
GetUserNameA
RegCreateKeyA
RegCloseKey

user32

GetDC
IsWindowVisible
GetClassLongA
GetCursor

shell32

SHGetSpecialFolderPathA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
memset
??2@YAPAXI@Z
strlen
exit
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr

Sections

.text
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE