a3f048b105f13179be2a86c25ea25117c11322043ed662db122f4e143f10830c | Triage

Sharing

General

Target

a3f048b105f13179be2a86c25ea25117c11322043ed662db122f4e143f10830c
Size

27KB
MD5

83513c46e94a9b7845cb43fe2b8c1bc1
SHA1

e81baef59fbb6b3cee81ac065523381325849e8b
SHA256

a3f048b105f13179be2a86c25ea25117c11322043ed662db122f4e143f10830c
SHA512

4b4b2596d596cbbc9b892f5acd2d3b4fef9d75c3d2fd9adb1e3c3f904aa22b4be84309289711c7900a9280e0ac15d495803cbac063daecce352873023a8c53ff
SSDEEP

384:7F/k89izogsqL3qC03TjIZ/3uSxwuffvLEgmgKbCKhmMsP3Vm/dnM:JkZzohqL3qCea3ugvfXLybAPsVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3f048b105f13179be2a86c25ea25117c11322043ed662db122f4e143f10830c

Files

a3f048b105f13179be2a86c25ea25117c11322043ed662db122f4e143f10830c
.exe windows:4 windows x86 arch:x86

1e1d46e3bf6a210f761f54a7abb04fc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetTickCount
GetLastError
lstrlenA

user32

wsprintfA

advapi32

OpenServiceA

ntdll

strncpy
memset
memcpy
strlen
strcpy
strcmp
_allmul
wcscmp
wcscpy
wcslen
strstr
RtlUnwind
NtQueryVirtualMemory

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE