c3bbbb217c71fac5a77d99df72e2728a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3bbbb217c71fac5a77d99df72e2728a
Size

52KB
MD5

c3bbbb217c71fac5a77d99df72e2728a
SHA1

874c2d05f3ce07e170e4b0e4834ad491f4280336
SHA256

e518c5bf924c4ad3ce592e706a7000203466c11f8791027b864b446dc3dd4765
SHA512

5cd7ddd2c233cd77ee23aaed305eee55800e339453a5cf0f8b2072fd9240d5e389f3ddd46539008a6c2abaa1cdf0f57d6339e3edb4d399aad00bfe08d3ea6a81
SSDEEP

768:iRgTIAwWn2hsM86eb9y3iIDAhXzVgWSQ0Q4jbh8ukb78wd+WafEqDmBBI2L:cAh2hsL6eU3HABS3QkbjUWEqDYe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3bbbb217c71fac5a77d99df72e2728a

Files

c3bbbb217c71fac5a77d99df72e2728a
.exe windows:4 windows x86 arch:x86

d359d406e2c4c7bc914543b741274443

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetCommandLineW
GetModuleHandleA
GetModuleFileNameA
GetStartupInfoW
GlobalAddAtomA
FindResourceA
CallNamedPipeA

user32

SystemParametersInfoW
LoadStringA
RemovePropA
IsCharLowerA
DlgDirSelectExA
DefWindowProcW
CreateDialogParamA
IMPQueryIMEA
SendNotifyMessageA
CreateAcceleratorTableA

gdi32

GetGlyphIndicesA
GetTextExtentPointA
GetCharWidth32A
GetEnhMetaFileDescriptionA
RemoveFontResourceW
GetCharacterPlacementA

Sections

.data
Size: 43KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 793B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ