3f932b55774109c40dfe20d040840fbb | Triage

Sharing

General

Target

3f932b55774109c40dfe20d040840fbb
Size

46KB
MD5

3f932b55774109c40dfe20d040840fbb
SHA1

6145bfc778303dcd4803f6c2cb435bbe521350a8
SHA256

9f3f0fc20621ad08a761035bce0637f9a67110364ec1675e9ce5663cc89244ea
SHA512

22e5bd831ee9916301ce758da07775245493d7f0d8aa0315c391a287ca26ef7aaa0d8ac44fca9ca888be9aefbbfc9620efa05d87242d8404cd695b52e09dd092
SSDEEP

768:lmfbO6g9GTw8rUfUYJdvfLQJGkTOUOES6mWwwGGE7h9u3J10kqXZ:lo6J9GTwYU8Qvf3sOzzJwGnTU1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f932b55774109c40dfe20d040840fbb

Files

3f932b55774109c40dfe20d040840fbb
.exe windows:5 windows x86 arch:x86

9e8c8a0192ed30fcc4c6f980dc9744c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

DuplicateTokenEx
CryptCreateHash
RegDeleteValueA
RegQueryValueExA
CryptReleaseContext
RegCloseKey
CryptGetHashParam
CryptHashData

shlwapi

StrCmpNIW
wnsprintfA
PathFileExistsW
PathRemoveFileSpecW
SHDeleteKeyA
PathMatchSpecW
StrCmpNIA
wvnsprintfA
StrStrW
wnsprintfW
wvnsprintfW
PathFindFileNameW

Sections

.dankl
Size: 36KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihwnqt
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.slob
Size: 5KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ