3e90ce90c52bc428ed6b0cf0384bb9481fbd18c34a5f7e7c5d6f67724a981edc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e90ce90c52bc428ed6b0cf0384bb9481fbd18c34a5f7e7c5d6f67724a981edc
Size

72KB
MD5

0ea461b12e6a9b2ff17ef44ae7274cf8
SHA1

f152de5351068feb9830ab9108bb76fbcdeed0ea
SHA256

3e90ce90c52bc428ed6b0cf0384bb9481fbd18c34a5f7e7c5d6f67724a981edc
SHA512

bc6a5064804005e2f89c868ad3f48c71ed5002c439140e1750f11263bd0aa5c9017445b1294549189c9941b654621b5f832efeca751b47163f1f8748a8168bc2
SSDEEP

1536:1l52iwhqb1tqObPvZkcUbSpx7/wteyNjaZ:P0PhqZ/TvZtYSXceKg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e90ce90c52bc428ed6b0cf0384bb9481fbd18c34a5f7e7c5d6f67724a981edc

Files

3e90ce90c52bc428ed6b0cf0384bb9481fbd18c34a5f7e7c5d6f67724a981edc
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE