3f52f33093fca62c2c02332caaf649df7dd149cd77400268de872ff2b7d83207 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f52f33093fca62c2c02332caaf649df7dd149cd77400268de872ff2b7d83207
Size

2.5MB
MD5

aa0d53119d8992fe830f1f19fbca40ac
SHA1

14f3bd8362032d2c477348b4b4be482c1ace60ea
SHA256

3f52f33093fca62c2c02332caaf649df7dd149cd77400268de872ff2b7d83207
SHA512

505e11f1308b204b65e52079f98ad315a00d89f5faafe868c8eba56a04e504c0c8f97d265c01b8eec18895830143e07a45cc2ba2af7281b98995a33e4c11b93e
SSDEEP

49152:YHufVLp/yX98a7B+S9TAu8pg3hbvYHVR5Ijq4PQ/c+tZDhDYMLFrsU+sA:kEVLtytdX18y3hjYHjKrPv0NcYr3hA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f52f33093fca62c2c02332caaf649df7dd149cd77400268de872ff2b7d83207

Files

3f52f33093fca62c2c02332caaf649df7dd149cd77400268de872ff2b7d83207
.exe windows:6 windows x64 arch:x64

ee93ddebbf5258fb8be12e5333dca258

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegSetValueExA

shell32

SHGetFolderPathW

Sections

.text
Size: 1.3MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ