3fff3a0eebd4b48a94b30f7201125a04

General

Target

3fff3a0eebd4b48a94b30f7201125a04
Size

62KB
MD5

3fff3a0eebd4b48a94b30f7201125a04
SHA1

b38fcad6221882adf771a1aedacea48ca765aafd
SHA256

aa29d0c19a654ea556f6ce677afa89872fc274a525e9aad7c5010557569fe0d4
SHA512

ec62331a970725c44319bc50c558b6cb87f9985adf0fbe6bf87abf2b6417b5ff2d8a28bd0bea223ad81e84ec13be4b618cb8e8e822d65ce3e0ef89a5b6eed044
SSDEEP

768:nSWrvCdph93pLNawbfQxktKkJUHzj6Zz6ZjkfZa8g0Uc07Wr+P+I:Sd93RNrYxktIXceL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fff3a0eebd4b48a94b30f7201125a04

Files

3fff3a0eebd4b48a94b30f7201125a04
.exe windows:4 windows x86 arch:x86

f3e8a2881414b8844ac0d1a3243ddbdd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
lstrlenA
DeleteFileA
GetTempPathA
SetFileAttributesA
GetSystemDirectoryA
GetModuleFileNameA
FindResourceA
FreeLibrary
CopyFileA
OpenProcess
LoadLibraryA
GetLastError
CreateMutexA
Process32Next
TerminateProcess
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
GetStartupInfoA
GetProcAddress
Sleep
LockResource
GlobalAlloc
GetCurrentProcessId
SizeofResource
LoadResource

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyA

gdi32

GetPixel

mfc42

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
??1type_info@@UAE@XZ
_setmbcp
__dllonexit
sscanf
__CxxFrameHandler
_mbscmp
exit
_onexit

psapi

EnumProcessModules
GetModuleFileNameExA

shell32

ShellExecuteA

user32

GetDC
GetCursorPos
GetWindowRect
GetForegroundWindow
KillTimer
EnableWindow
GetAsyncKeyState
GetKeyboardState
GetClientRect
DrawIcon
SetTimer
SetWindowPos
FindWindowA
GetWindowTextA
SendMessageA
LoadIconA
IsWindow
GetSystemMetrics
GetWindowThreadProcessId
IsIconic

wsock32

inet_ntoa
gethostname
gethostbyname

Sections

code
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.avc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f3e8a2881414b8844ac0d1a3243ddbdd

Headers

File Characteristics

Imports

kernel32

advapi32

gdi32

mfc42

msvcrt

psapi

shell32

user32

wsock32

Sections

code Size: 56KB - Virtual size: 56KB

.rsrc Size: 2KB - Virtual size: 4KB

.avc Size: 3KB - Virtual size: 4KB

code
Size: 56KB - Virtual size: 56KB

.rsrc
Size: 2KB - Virtual size: 4KB

.avc
Size: 3KB - Virtual size: 4KB