3b3c9ca1a182d77b92094ae0dd3a3cda32df7443c9811b812dc9e3c4afa79d5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b3c9ca1a182d77b92094ae0dd3a3cda32df7443c9811b812dc9e3c4afa79d5e
Size

71KB
MD5

560ac37111954e69d88a583f1c3a0745
SHA1

58563dd54db46961ee463597690f44df708366c3
SHA256

3b3c9ca1a182d77b92094ae0dd3a3cda32df7443c9811b812dc9e3c4afa79d5e
SHA512

c79d04e50f9499b1d1c188c8a6907d69850bd64853a56cc90f0016db15f3c830a6ba0e16189d125eba73eb3668740675535fe690465d28d48a63c9570cae57ca
SSDEEP

1536:xAyToPledgGkAlSt9yzkwUk6Nr5kEHIwAsO:3hgRAlStYzkrJNFkEHA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b3c9ca1a182d77b92094ae0dd3a3cda32df7443c9811b812dc9e3c4afa79d5e

Files

3b3c9ca1a182d77b92094ae0dd3a3cda32df7443c9811b812dc9e3c4afa79d5e
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE