c39ff71fd5477703d92c97e87b6c70a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c39ff71fd5477703d92c97e87b6c70a3
Size

416KB
MD5

c39ff71fd5477703d92c97e87b6c70a3
SHA1

22fc08823ee2f3193160cc7a1caf2f104e7f7f2e
SHA256

f025017de84b9ba6317060a0e9a7d94d93e25fb843727d8633a90ab7b0db6e8e
SHA512

ce0d9af4c83fdee3171ec65701ab419d0e09b2d5246d1b06cc745120733cb270277c3ac41691e3609b8e050d5ec1e8e69019ef7addf23fb41b75b7c580ccff25
SSDEEP

6144:U1ojUwD3TilJTq4y+ydvMQp7Tmd7xG8twYU42vw:UKowTWTq4yzd/tS7U8tEn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c39ff71fd5477703d92c97e87b6c70a3

Files

c39ff71fd5477703d92c97e87b6c70a3
.exe windows:4 windows x86 arch:x86

3490b1623eaae940b66d1fd669b808ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
GetFileAttributesA
GetStdHandle
GetCommandLineA
GlobalFree
InterlockedExchange
CloseHandle
LoadLibraryExA
EnterCriticalSection
GetLocaleInfoA
VirtualProtect
LockResource
GetSystemDirectoryA
SetErrorMode
GetACP
GlobalDeleteAtom
HeapCreate
GetLastError
GlobalAddAtomA
RaiseException
Sleep

user32

BeginPaint
DrawTextA
ValidateRect
wsprintfA
IsIconic
GetParent
GetWindowTextA
DrawEdge
FrameRect
GetMenuItemInfoA
EndPaint
GetFocus
SetForegroundWindow
GetWindow
ReleaseDC
GetCursorPos
GetClassNameA
ShowWindow
GetActiveWindow

httpapi

HttpCreateHttpHandle
HttpRemoveUrl
HttpInitialize
HttpAddUrl
HttpTerminate

wshtcpip

WSHNotify

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ