c3b4f50c3d8898aa26648b261c430f2f

General

Target

c3b4f50c3d8898aa26648b261c430f2f
Size

334KB
MD5

c3b4f50c3d8898aa26648b261c430f2f
SHA1

5f791a9c55f80c604b6ee6a54b0649a9f29e1b17
SHA256

f11af532a72dfd79c48c79a98405fe50666d0cd1598d42cdce6345df8db67143
SHA512

7737041d987aa57be3bc4a97a7271d283925c6883314236d7cf9a168b7044206c14fb54159fd35369e4f84cbf78afc5292b23f2d7c9322b1ddc2f3aa9787b2df
SSDEEP

6144:u161lgUnOZDrSsnO3HUFUGIjQtMvd/dllHe1obz5f1iS9EABoknISWjwo03BNk:DlgUnOZDWsO3+VIjJvd/HuUUuBo+IJwu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3b4f50c3d8898aa26648b261c430f2f

Files

c3b4f50c3d8898aa26648b261c430f2f
.exe windows:4 windows x86 arch:x86

1584f78b6df5d8ef533c00cfdba7811f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgOpenStorage
CoSuspendClassObjects
CoRevokeClassObject

advapi32

RegRestoreKeyA
RegNotifyChangeKeyValue
RegQueryInfoKeyA
RegQueryValueA
RegQueryValueExA
RegQueryMultipleValuesA
RegSetValueExA
RegCreateKeyExA

kernel32

ResumeThread
GetModuleFileNameA
GetStartupInfoA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
GetProcAddress
OpenEventA
LocalHandle
TlsGetValue
GetEnvironmentStrings
ReleaseSemaphore
GetACP
CloseHandle
LCMapStringA
GetCommandLineA
QueryPerformanceCounter
TlsSetValue
VirtualAlloc
LocalLock
GetProcessHeap
CreateSemaphoreA
GetModuleHandleA
GetEnvironmentVariableA

winspool.drv

AddJobA
DeletePrinterConnectionA
AddFormA
AbortPrinter
AdvancedDocumentPropertiesA
AddPrinterConnectionA
DeleteFormA
DeletePrinter
DeletePrinterDataA

msvcrt

exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_exit
_XcptFilter

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 314KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1584f78b6df5d8ef533c00cfdba7811f

Headers

File Characteristics

Imports

ole32

advapi32

kernel32

winspool.drv

msvcrt

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 314KB - Virtual size: 314KB

.data Size: 512B - Virtual size: 93KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 314KB - Virtual size: 314KB

.data
Size: 512B - Virtual size: 93KB

.rsrc
Size: 5KB - Virtual size: 5KB