c3c8e13389517cd720515ea25a1de0f0 | Triage

Sharing

General

Target

c3c8e13389517cd720515ea25a1de0f0
Size

181KB
MD5

c3c8e13389517cd720515ea25a1de0f0
SHA1

7dd228e3211e15d58afcf88903f4609390045606
SHA256

47303073b0228226cf21f3f421b527b4ea3dde58e3fbade129f0b35313b1b453
SHA512

78949137e66926b3e9c3bf8ae1d7c693fec7667d69ab10c22a3e954ab3bfda33fdda42735235a6b0ad0ae058008ac0167729056a6e107ed05e60bb31125f33d8
SSDEEP

3072:S/98m0Vvh5yudk50iw0kopNzoAuqB3Jdmp/oXX+4dMigVJfhllF2WgFGSXrELd0y:JNsudk5dZjzH1ZoUSVrlD2jFGSXrAd9Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3c8e13389517cd720515ea25a1de0f0

Files

c3c8e13389517cd720515ea25a1de0f0
.exe windows:4 windows x86 arch:x86

4aaaed25dfe3341b08872dcc8ec07b12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
CreateNamedPipeW
GetCommandLineA
ExitProcess
GetStartupInfoA

user32

DdeFreeDataHandle

Sections

.code
Size: 5KB - Virtual size: 809KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 172KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE