3fb11e5f9df93abc977b38af8333ef6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fb11e5f9df93abc977b38af8333ef6e
Size

489KB
MD5

3fb11e5f9df93abc977b38af8333ef6e
SHA1

c964b01f1cdf66cb869abb0ea9e697148d4f9e16
SHA256

d52a6220b50d3a1d4fe19577c66fcd7f301faa3e7c2dd7fc0460cc5378ca66e8
SHA512

4c5d6728ca3f1752252d6e971828cab60b4de9b0f7ca7bf9f855d4c79c4759679fe82e4867fe2ac5e6d95030c342cbd4d66932dba28e82fb995954404ef128d0
SSDEEP

12288:2xTk7dwUOP2ForLTllroLx71/UgXNLiz3UHh:yk7dwXeexlroL7aUHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fb11e5f9df93abc977b38af8333ef6e

Files

3fb11e5f9df93abc977b38af8333ef6e
.exe windows:4 windows x86 arch:x86

51d74ae3626a212e596ccdb261a6006b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SafeArrayPtrOfIndex

wininet

InternetReadFile

avicap32

capCreateCaptureWindowA

msacm32

acmFormatChooseA

ws2_32

WSAIoctl

user32

CreateWindowExA

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

ImageList_SetIconSize

shell32

Shell_NotifyIconA

advapi32

StartServiceA

wsock32

WSACleanup

winmm

waveOutWrite

mpr

WNetOpenEnumA

Sections

Size: 433KB - Virtual size: 972KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE