3bf66c69e2b2c46d1bf6a750564e38069e68efed152880bf48d4fe44da005e53 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bf66c69e2b2c46d1bf6a750564e38069e68efed152880bf48d4fe44da005e53
Size

99KB
MD5

20f938c1aa70c3d4c7b6861d366b256d
SHA1

1e6788fd7db62f02343d753aa45eb6a1ddf30597
SHA256

3bf66c69e2b2c46d1bf6a750564e38069e68efed152880bf48d4fe44da005e53
SHA512

a490de3ba8cdd411130d050811d077e3a9bed71d4b31d3c515ee1a47829c6b601fcf6cd5123fe7c98dc1302257ff453df873933b4765391138709b78e88b0969
SSDEEP

3072:E1UglJCFl31xufZnwRgC5SCsu2oh40kv3VucVEB:RwJiJTEHC5Fsu6vFuP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bf66c69e2b2c46d1bf6a750564e38069e68efed152880bf48d4fe44da005e53

Files

3bf66c69e2b2c46d1bf6a750564e38069e68efed152880bf48d4fe44da005e53
.exe windows:4 windows x86 arch:x86

2158a3ad0ff87849ff6c05b1f558bfdc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalReAlloc
FindNextStreamW
SetConsoleMode
EnumResourceNamesExA
GetSystemPowerStatus
OpenMutexW
BaseCheckAppcompatCache
QuirkIsEnabledForPackageWorker
RegisterWowBaseHandlers
GetCurrencyFormatEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 41KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE