3fac9b33b980da9f20c2974916ca0f015208179f929c68a78b190af31483d589 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3fac9b33b980da9f20c2974916ca0f015208179f929c68a78b190af31483d589
Size

48KB
MD5

6eb934c37fabd517d85050be6ff1273a
SHA1

d8c1c55bd51620661b911ccd98386890df586a05
SHA256

3fac9b33b980da9f20c2974916ca0f015208179f929c68a78b190af31483d589
SHA512

cdae518fc5e7e1c3ce7be4c7bff666f253a17f084eb3d105128cb90acfefb6df1c108663b78ea9ff51d52a1758d9cbf76195477b3bd1064e3db813731578836f
SSDEEP

768:0ex2ZFuS3P4OjHXRrs9sINeZEtejlIkoLN127BFVn2p4lAnZ8Oog+favSxf7x8q4:0eqPjXRrs9sINeZEtejlIkoLN127BFV8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3fac9b33b980da9f20c2974916ca0f015208179f929c68a78b190af31483d589

Files

3fac9b33b980da9f20c2974916ca0f015208179f929c68a78b190af31483d589
.exe windows:4 windows x86 arch:x86

7763b13757a016b5cb5406899f818c79

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW
SendMessageW
EndDialog
GetDlgItem
DialogBoxIndirectParamW
wsprintfW

kernel32

ReadFile
GetModuleHandleA
GetFileSize
CloseHandle
VirtualAlloc
CreateFileW
lstrcpyW
GetStartupInfoA

wintrust

WinVerifyTrust

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ