3f79af5c415898c279c6d5f76e8dd710 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f79af5c415898c279c6d5f76e8dd710
Size

228KB
MD5

3f79af5c415898c279c6d5f76e8dd710
SHA1

6d633461533eca9413ef699b7e68d245261a88c9
SHA256

10a451fc1e7687549d6e116dd5ff984f3468de4dcc6e1494ed16c6c501668eb6
SHA512

d6fb55e05ab09f5aee47a51764db246c9d0d4762fe006479c437b7536f14dce14d58213ccf87cab5ab61c419b1520e4631bae7bf9860609fbe8945e782ccb9e4
SSDEEP

3072:J/CB+xwnznIlX2jo4mDEdGhVbRryF/vo8QHGCcBil1LY6G+WaF9M6XxcaG7:JXWzWXYrmD4GhVbRMoGBicxcMYC7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f79af5c415898c279c6d5f76e8dd710

Files

3f79af5c415898c279c6d5f76e8dd710
.exe windows:6 windows x86 arch:x86

6ef74f7b87fa15b6df54d064a5b8ef31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetCommandLineW
WriteFile
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
WaitForSingleObject
GetCurrentProcess
ExitProcess
GetExitCodeProcess
CreateProcessW
GetWindowsDirectoryW
VirtualProtect
IsWow64Process
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExW
LocalFree
GetBinaryTypeW
lstrlenW
WideCharToMultiByte
EnumTimeFormatsW
GetConsoleOutputCP
WriteConsoleW

user32

LoadStringW
MessageBoxW

ole32

OleInitialize
OleUninitialize

msvcrt

towlower
malloc
memset

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 286B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ