3cb1ee309535accc9177cfb34d6b50307e5830a7f9689695edf91a5db134e0dd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cb1ee309535accc9177cfb34d6b50307e5830a7f9689695edf91a5db134e0dd
Size

5KB
MD5

00955bde70accf7fc366915a2481f384
SHA1

d5e9fd971194e7b3917e0eccf9f404363f2e76ea
SHA256

3cb1ee309535accc9177cfb34d6b50307e5830a7f9689695edf91a5db134e0dd
SHA512

2d188a572bc9028c5f968541cc3b59a23c1846b84f8b1f6ad1577b7b2efe415763f00d74b7e64cf45153dca16d771d8499c4b7d7c54ced60cf9483b348215761
SSDEEP

48:SqlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7t5RuqSxp:LWLkFfNnOKYloIQ2pm2pbYSXxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cb1ee309535accc9177cfb34d6b50307e5830a7f9689695edf91a5db134e0dd

Files

3cb1ee309535accc9177cfb34d6b50307e5830a7f9689695edf91a5db134e0dd
.exe windows:5 windows x86 arch:x86

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ