3fe46f8ba0a8a46a82e44d1b8b7cb806

Sharing

Copy URL

Twitter E-mail

General

Target

3fe46f8ba0a8a46a82e44d1b8b7cb806
Size

166KB
MD5

3fe46f8ba0a8a46a82e44d1b8b7cb806
SHA1

3549289e86e4f36828d9aec0e915eb78c9c98381
SHA256

329c40bee5d8b275b3c880a0150d17668f7c1901b4f838bdf5aae41d54eee822
SHA512

71cc390a8d8c4e88226f8d1c69235bd2dcd1425cfb756205d3feb4b687931eb904d3815f077f9f6178672aa8494e84d2149f7303a08b9da21194060b6d6933db
SSDEEP

3072:JQSHgKssVWYGJUcufAM13sx4o7F0K/V0YGdKQYX/fsoUKbOOmRnWE9qihkGI2d:QlYLc0At4KFPMgPnalnWE9phkGIq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fe46f8ba0a8a46a82e44d1b8b7cb806

Files

3fe46f8ba0a8a46a82e44d1b8b7cb806
.exe windows:6 windows x86 arch:x86

a606b378ac1956dea1c6dd7a0d0366ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptAcquireContextA
CryptImportKey
CryptReleaseContext
CryptDecrypt
CryptEncrypt
CryptDestroyKey
SystemFunction036

kernel32

GetProcAddress
VirtualAlloc
Sleep
CreateDirectoryA
DeleteFileA
CreateFileA
ReadFile
LoadLibraryA
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
GetTempPathA
GetLastError
GetModuleFileNameW
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetModuleFileNameA
GetCommandLineA
GetCommandLineW
GetACP
HeapFree
HeapAlloc
CompareStringW
LCMapStringW
GetFileType
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetProcessHeap
CloseHandle
FindClose
FindFirstFileExA
FindNextFileA
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DecodePointer
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
CreateFileW

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a606b378ac1956dea1c6dd7a0d0366ef

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

Sections

.text Size: 73KB - Virtual size: 73KB

.rdata Size: 28KB - Virtual size: 28KB

.data Size: 59KB - Virtual size: 61KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 73KB - Virtual size: 73KB

.rdata
Size: 28KB - Virtual size: 28KB

.data
Size: 59KB - Virtual size: 61KB

.reloc
Size: 4KB - Virtual size: 4KB