c3c1adc2aebbb81cdc166b5da668b0f268d3935d49ad7f8cfaf8cbb11c59255f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c3c1adc2aebbb81cdc166b5da668b0f268d3935d49ad7f8cfaf8cbb11c59255f
Size

2.1MB
MD5

b8fb08f816cfd35b74f0e45f2cf0c7d8
SHA1

135cfb67f1d52a927a4b7e5d6e4e4683c4678245
SHA256

c3c1adc2aebbb81cdc166b5da668b0f268d3935d49ad7f8cfaf8cbb11c59255f
SHA512

ea0f2604bc15a4a6ee83cc040a2a0963b431dded6a3ca622e65144b376c4980f65bb311484bb748b04b90ece6a05b512fab03ddae5db571884fa36abfc1a8924
SSDEEP

49152:BTfdd6MYXDl5RjEH24ecKc+NtHKXCbNh5IN3FhqBow:BTfdd6MYXDl5RjEHd1itHKXsXIN31w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c3c1adc2aebbb81cdc166b5da668b0f268d3935d49ad7f8cfaf8cbb11c59255f

Files

c3c1adc2aebbb81cdc166b5da668b0f268d3935d49ad7f8cfaf8cbb11c59255f
.exe windows:4 windows x86 arch:x86

a7e3e5361e6838308f3f0d9da61498d2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gfawin23.ocx

ord5

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ