3fa1c9a18ecfd1fe0896e9387c7f989e | Triage

Sharing

General

Target

3fa1c9a18ecfd1fe0896e9387c7f989e
Size

16KB
MD5

3fa1c9a18ecfd1fe0896e9387c7f989e
SHA1

25113e02b0796aabcb7cabfd1645365c8ab76046
SHA256

86b342b8bde112fb64883f6448813563d955100bcc378b39ac9532faa99cff3a
SHA512

95d6e11e0043bd6a4fef6ea137e38d11d2c06a944cc736f1aaa58f9d82a4923286d1570942beb4bd095512994842649774f1d0f62e0b66829b4d0421df299ff1
SSDEEP

192:o0H0G6wU1cpsmyV7SM4o4feeEEZpaHIzHDDDl:oqxjU1cK7TweUpGCp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fa1c9a18ecfd1fe0896e9387c7f989e

Files

3fa1c9a18ecfd1fe0896e9387c7f989e
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ