3ff507988a0b5aa54755d0d6925be97f

General

Target

3ff507988a0b5aa54755d0d6925be97f
Size

3.2MB
MD5

3ff507988a0b5aa54755d0d6925be97f
SHA1

6b42e8a0e51383672e6b46e9ecfa26a5dc8b8a65
SHA256

bf88877a49d0a9c81e9b15e0a060cf35e3567c3b019971a791bb3faed8c10b1e
SHA512

6522b6d049a7f8f381facdf9d4da8d8c8fdd1b1858030899066a64a16018e5f4f5b931e3b0faf5cdefcfebfa8a063aad1c0809b6a8292ef3125b45497bfba985
SSDEEP

24576:eeoksQ6ecH/HM2QXPnzcoQT6tc6r/JBaNyDCQ7ta4woutIYYxivLQ5H:Qf2hzQSl80uyhOLQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ff507988a0b5aa54755d0d6925be97f

Files

3ff507988a0b5aa54755d0d6925be97f
.exe windows:5 windows x86 arch:x86

b08edfadcb04a491b8306e85da23bbbd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetLastError
GetSystemTime
HeapReAlloc
HeapAlloc
GetStringTypeW
MultiByteToWideChar
LCMapStringW
HeapSize
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapFree
Sleep
IsProcessorFeaturePresent

userenv

LeaveCriticalPolicySection
EnterCriticalPolicySection
ExpandEnvironmentStringsForUserW
GetUserProfileDirectoryW
LoadUserProfileW
UnregisterGPNotification

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b08edfadcb04a491b8306e85da23bbbd

Headers

File Characteristics

Imports

kernel32

userenv

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 1.9MB - Virtual size: 1.9MB

.data Size: 3KB - Virtual size: 6.8MB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 1.9MB - Virtual size: 1.9MB

.data
Size: 3KB - Virtual size: 6.8MB

.rsrc
Size: 12KB - Virtual size: 12KB