3fd509db8eec1dfc30c0d24fb2487ac4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fd509db8eec1dfc30c0d24fb2487ac4
Size

240KB
MD5

3fd509db8eec1dfc30c0d24fb2487ac4
SHA1

36116d65d8495d61f9b59c0d9324f35fcca6e7a7
SHA256

e11d184727e26c3619eb9078fa301854d69505eb901ca72ff0b2a00ea40bf8f7
SHA512

9d09d3f77e6d004c49e22927b1714c75918b81f20fcc4312f74082719330041122ea002cf9608f2a974ab7086699d1334221b1914f02c3e9276c2791dc8cddbd
SSDEEP

3072:X2Ap2nTerI3CwnLbsHPIx1EDjD8jXZiMMIaKfFutk9CEJUJ+EhQtULqKhRL7U4QX:GT4I3xLb4wmDIVV9CE2EESKL7LI4Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fd509db8eec1dfc30c0d24fb2487ac4

Files

3fd509db8eec1dfc30c0d24fb2487ac4
.exe windows:4 windows x86 arch:x86

961e1e2d719a34fb28bf0c4faabce61c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
SizeofResource
CreateFileA
LockResource
LoadResource
FindResourceA
MoveFileExA
FreeLibrary
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GetVersion
lstrcatA
GetWindowsDirectoryA
DeleteFileA
lstrlenA
CreateDirectoryA
lstrcpyA
GetCommandLineA
GetStartupInfoA
HeapFree
GetProcessHeap
HeapAlloc

setupapi

SetupIterateCabinetA

shell32

ShellExecuteA

shlwapi

SHSetValueA

user32

wsprintfA

Sections

.rdata
Size: 1024B - Virtual size: 894B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 237KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ