3cb455b870be17d9a0891527e3a7a0dbdaf52832e7cd2f201062bd6f1fa0b8cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cb455b870be17d9a0891527e3a7a0dbdaf52832e7cd2f201062bd6f1fa0b8cd
Size

297KB
MD5

abcdfb4dad5359c81f69bc80496d933f
SHA1

281352b4888c253b69a9fc90dfd4c024f3ccef05
SHA256

3cb455b870be17d9a0891527e3a7a0dbdaf52832e7cd2f201062bd6f1fa0b8cd
SHA512

caf86c03f45b2f0f8686bda30332ca4ae00be3dcd2869a3ab709c4591719de6c0b3841293919ce2c0f6207e09b9a2da370884b1886a4da5f961afe194ba2a3e1
SSDEEP

6144:0RIOnicZ7tD7vy7rSxqewCcE3bRK3PTgvaOwXWlBtg/ny:0RImLSSYtxPUhR9g/ny

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cb455b870be17d9a0891527e3a7a0dbdaf52832e7cd2f201062bd6f1fa0b8cd

Files

3cb455b870be17d9a0891527e3a7a0dbdaf52832e7cd2f201062bd6f1fa0b8cd
.exe windows:1 windows x86 arch:x86

eb85f9841caba6951fdea133fd00eec3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
RtlUnwind
lstrlenA
GetModuleHandleW
CloseHandle
GetCurrentProcess
GetStartupInfoW
GetLastError
lstrlenW
GetVersionExW
LoadLibraryW

crtdll

__GetMainArgs
exit
raise
signal

user32

SetForegroundWindow
LoadStringW
SendMessageW
MessageBoxW
DefWindowProcW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 988B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ