3f9060b6bc4fcd29aa933c2dd331c8bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f9060b6bc4fcd29aa933c2dd331c8bf
Size

423KB
MD5

3f9060b6bc4fcd29aa933c2dd331c8bf
SHA1

cf607f3c16995a14e2c82fbd8e3f73e362ac24e5
SHA256

13def1c0b07a489b21030f9e8310a14b51877150a74e60297254e09433e829be
SHA512

502bcd7b93d695d7159a1e7e363f557fa6563fcc336f2216879317cc6c4c122cbc5b9e41352be7114fa99f0e9c76ee71ed67317120f5e68e4bfad6b6e2fd46a2
SSDEEP

12288:riBr1bZcmq3f4W0cCOy+T9G9oa+1yTtuH5Sqs:eLbij3f4g76z+13Qqs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f9060b6bc4fcd29aa933c2dd331c8bf

Files

3f9060b6bc4fcd29aa933c2dd331c8bf
.exe windows:4 windows x86 arch:x86

d09ec5c63d53a6dd3417fbb833297860

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

user32

MessageBoxA

Sections

pec1
Size: 401KB - Virtual size: 860KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pec2
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE