c3848637a064d5c5706fb06c48252ff3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3848637a064d5c5706fb06c48252ff3
Size

64KB
MD5

c3848637a064d5c5706fb06c48252ff3
SHA1

a36130f08e0580875c5e79d6efc8828438e228f7
SHA256

981976e792b52b17cbff59e1bc7c9ada443c7534fcc41ee4567b78cc958562eb
SHA512

5d96ddc19d5c9c3cb6bf6f2f901766b69c3ad55e3edc0db07c01d4ad34160df4ffa0744ea4d7524fdb4f2f9cd95122dc6f720c6737a6eba3add056926e2f604f
SSDEEP

768:7D3a+y9dvrFVuspcWaxpDlxzO1t9fQULvA/7J5d8:7DazRrfpWpD3zO1/fQt7S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3848637a064d5c5706fb06c48252ff3

Files

c3848637a064d5c5706fb06c48252ff3
.exe windows:4 windows x86 arch:x86

fd721ee37cb81477f74cb841bd2a970d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetFilePointer
WriteFile
CreateFileA
CloseHandle
SetFileAttributesA
DeleteFileA
GetCurrentProcess
GetSystemInfo
GetLastError
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges
RegDeleteValueA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA

winmm

mixerOpen
mixerGetLineInfoA
mixerSetControlDetails

msvcrt

_controlfp
_except_handler3
??3@YAXPAX@Z
sprintf
__CxxFrameHandler
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ