3f41018331c4c1f58d9076392a677f80N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f41018331c4c1f58d9076392a677f80N.exe
Size

238KB
MD5

3f41018331c4c1f58d9076392a677f80
SHA1

337e4f1059a4b9fe17650727ac919f5ba42574ba
SHA256

59914d6edcab8ca1dcb2c2c5213adf690e186e6d0240e7417fde1f95142d23a6
SHA512

ad672201df8b3bbeb15e42e3013deb2f6158346ef56a137fa04849efb504af3d42946acaf3f64b4a3bbc11803a2c41a6ddfb1628a58e3e1338baa5928db69905
SSDEEP

6144:OfqWdfWO7P77z4qp2OIWUHNX/qNMNKHMshsjNty:O/fWO78ZLqNMYMz3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f41018331c4c1f58d9076392a677f80N.exe

Files

3f41018331c4c1f58d9076392a677f80N.exe
.exe windows:4 windows x86 arch:x86

be3d245062de29384df92d230fae9a21

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
IsWow64Process
GetCurrentProcess
OpenProcess
LocalAlloc
LocalFree
CloseHandle
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringA

wininet

InternetGetCookieExA
InternetSetCookieA
InternetGetCookieA

msvcrt

strncmp
realloc
atoi
_ftol
sprintf
strncpy
??3@YAXPAX@Z
??2@YAPAXI@Z
strchr
free
strstr
malloc

user32

MessageBoxA
wsprintfA

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

Sections

.text
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE