b3b30918cf369955cec31ffa29980a90N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b3b30918cf369955cec31ffa29980a90N.exe
Size

63KB
MD5

b3b30918cf369955cec31ffa29980a90
SHA1

bb8c614a62e78d60342649255bbf5fa406ee421c
SHA256

79e8cd4451defad6df9de6da8ab968793bfca4ff99673a6cb29ab99422a9f4f5
SHA512

61eb444cc229efe8afb2886d25524255d0512898961f18310631c8dd12c0e680a22408a5c06bee79c4524faba30a19349c94cf9571d3614ccde1cb147c199b7e
SSDEEP

1536:QZpb3shGXLhsQ29wE8AtlUapOG4jVRvfdp3kD85ip:QTb3sIXLKQ26EwVhfP3kDWU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3b30918cf369955cec31ffa29980a90N.exe

Files

b3b30918cf369955cec31ffa29980a90N.exe
.exe windows:4 windows x86 arch:x86

a236fd0879cdef4799b9d7fa9b891381

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

K32GetWsChangesEx
EnumResourceLanguagesW
CreateFile2
RtlUnwind
GetProfileIntW
IsCalendarLeapMonth
K32GetPerformanceInfo
InitializeCriticalSection
FindFirstFileA
GetLongPathNameW
BasepFreeActivationContextActivationBlock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE