3cbb5deedf223607cde8b5c888ca5f25[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cbb5deedf223607cde8b5c888ca5f25.exe
Size

351KB
MD5

3cbb5deedf223607cde8b5c888ca5f25
SHA1

b4b08e4f7a08d7ba6c4097936bc0be49570ec50a
SHA256

fe4b962d06705129a7422c99a14ba1e4c9bd600605e3d1662bd35a06aae26b36
SHA512

55f9b337647f91a0f01052d013797e1a56651b00b65eb8c003fe11fa7d412551066ad1a2cb3fbb93950fe07c39c5d546baf55db515920f58efa052e81461e7aa
SSDEEP

6144:eM4XLY+YbkK2vglG3Q9XxvhHf2I9fNyTNHU2vyFbJZ3IiWedZzFcJUGVpGx:aXX6kxFQ9BvhH591yTXvKbJZ49edZxcO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cbb5deedf223607cde8b5c888ca5f25.exe

Files

3cbb5deedf223607cde8b5c888ca5f25.exe
.exe windows:4 windows x86 arch:x86

fce67081bb4c464c1e4676b63bc118df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LockResource
LoadResource
SetLocaleInfoW
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatDateTime
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 219KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE