3f7b9d4385539883cd70e442b00cd460 | Triage

Sharing

General

Target

3f7b9d4385539883cd70e442b00cd460
Size

82KB
MD5

3f7b9d4385539883cd70e442b00cd460
SHA1

6a665a96d08a15b78fb8443e5afeb047f4983d7a
SHA256

2b6223b7f8a561eb1e91a8371733aeae64dec6b0fbabe206ec16ea3d15731886
SHA512

216eaf4362c016a845435921b482799944946bf4cbbe061475a936f2e24fd2b088544d1bce277b1e98311c6ca71d6739d1221e0a6d40fdf5ec60f05a48a577bd
SSDEEP

1536:V7hlnKv10UkrMqhNMLJCNAc0P7buc2kFWbsQdMmFUTTlfZWpHF:V/KvtkrMWKarUGkFksxiUT5f8pHF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f7b9d4385539883cd70e442b00cd460

Files

3f7b9d4385539883cd70e442b00cd460
.exe windows:4 windows x86 arch:x86

1d452857325149a1822e7e8f743c4609

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyn
SetEnvironmentVariableA
SetUnhandledExceptionFilter
lstrcmpiW
GetNumberFormatW
GetProcessHeap
HeapReAlloc
lstrcpynA
HeapUnlock
CreateSemaphoreW
HeapUnlock
WaitForSingleObject
GetModuleHandleW
lstrcmpW
HeapSize
VirtualFree
HeapAlloc
LocalCompact
SetUnhandledExceptionFilter
CompareStringW
SignalObjectAndWait
GetProcessHeap
FormatMessageW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 579B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ