a3a1feeeb1cc2c61596bcb960b835b1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3a1feeeb1cc2c61596bcb960b835b1c
Size

183KB
MD5

a3a1feeeb1cc2c61596bcb960b835b1c
SHA1

266bf8801e68ee93b37280e38c7312b38bd8da71
SHA256

dc6beff3f7de728842b5ff181b73ca4083b004498721cf641fb4801cc9e499a1
SHA512

f7c7fcf929f3f1cba7508f2f20506870a6459fd9de0734b19f78a7dea98f1be0f3261b6357b33a49e712ecec078bc5cd9eb8364b5a4327a172370b8a7a528acc
SSDEEP

3072:rltZnjFQ2sjrJ/FWNZtFw+4VEH3vGEjbvrnpmSk/FH9dzrJLYBOBT6u4mpDM476B:rl/eZjtAsGH3vdjbvrn0ZzFYBmlFDMvB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3a1feeeb1cc2c61596bcb960b835b1c

Files

a3a1feeeb1cc2c61596bcb960b835b1c
.exe windows:4 windows x86 arch:x86

cfe80136ee2dd4ce7b67dc3020244ed2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeMountPointA
GetStartupInfoA
GetProcessId
ProcessIdToSessionId
EnumResourceTypesA
ExitProcess
TlsGetValue
TlsAlloc
TlsFree
GetFileType

oleacc

LresultFromObject

user32

LoadCursorW
GetWindowInfo
RegisterClassExW
CreateWindowExW
GetDC
GetUpdateRgn
MessageBoxW
EndDialog

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ