3f65a714f4db1d2f7d585abc7d60656d

Sharing

Copy URL

Twitter E-mail

General

Target

3f65a714f4db1d2f7d585abc7d60656d
Size

168KB
MD5

3f65a714f4db1d2f7d585abc7d60656d
SHA1

cb96a4d2eddde21a89e3d8ae98fc82fcbd5a1bdc
SHA256

6b5315d5569d448773a9d4c334f22475bf820132f65c824b733a5a9fefa4f845
SHA512

e64ad49d79fc59d98734766cf731d5c431635e960b023f288e2c3cd5214d13d54d303296eb0cf0f7d8c41da66e963293082ba7c261cd112f0260d19c9d474497
SSDEEP

3072:8B/yfWqIm2ToinfY86s+g0Sfh2WYhdH2eluFkVZH7SLmRYqC:8ofU3tfpj0gRUdH2etB+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

3f65a714f4db1d2f7d585abc7d60656d

resource
3f65a714f4db1d2f7d585abc7d60656d

Files

3f65a714f4db1d2f7d585abc7d60656d
.exe windows:4 windows x86 arch:x86

067fcf0e3c649c939fc336043fcbb35f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OutputDebugStringA
GetTickCount
IsBadReadPtr
GetNumberFormatA
GlobalAlloc
GetCurrentThreadId
GetProcAddress
LoadLibraryA
lstrlenA
SetFileAttributesA
lstrcatA
SetStdHandle
GetCurrentDirectoryA
IsBadCodePtr
SetUnhandledExceptionFilter
FlushFileBuffers
SetFilePointer
RaiseException
LCMapStringW
LCMapStringA
GetOEMCP
CloseHandle
GetFileSize
GetFileSizeEx
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
ReadFile
GetLastError
WriteFile
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
TerminateProcess
GetCurrentProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings

user32

GetClipboardData
FlashWindow
FindWindowA
GetWindowDC
GetWindowTextLengthW
wsprintfA
OpenClipboard
CloseClipboard
GetDesktopWindow

gdi32

GetBkColor
CreateHatchBrush

winspool.drv

GetPrinterA

comdlg32

FindTextA
GetOpenFileNameA

advapi32

GetUserNameA

shell32

FindExecutableA

shlwapi

PathGetCharTypeA
PathCombineA
PathFileExistsA

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

067fcf0e3c649c939fc336043fcbb35f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

shlwapi

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 120KB - Virtual size: 119KB

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 120KB - Virtual size: 119KB