3e951372b0bc90701b8c5a3b1ac2b205688e9e69f10969ef97a965c52f9b33d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3e951372b0bc90701b8c5a3b1ac2b205688e9e69f10969ef97a965c52f9b33d5
Size

13.6MB
MD5

d0dbb3c2e078af675acfcf6298e0f913
SHA1

aa996a8ed45309e939348b6bb6a1735277d3a1ba
SHA256

3e951372b0bc90701b8c5a3b1ac2b205688e9e69f10969ef97a965c52f9b33d5
SHA512

e6aa5bac1355465a5fbc20e16dff8e0c7a12200d87470468162c05551a2e508a027de1e9ec7019cfd3e1ff7eddb01ed6039a4ee191939a9dc7fc3e7c971499b3
SSDEEP

196608:grObzuGIQaSLiqT+qcYMQses1QW4uVSHUr2RB48vwLTdxEPLeycVxb2O33Y:B+GtaSZSqEdCndHUlTvKVcVxCO33Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e951372b0bc90701b8c5a3b1ac2b205688e9e69f10969ef97a965c52f9b33d5

Files

3e951372b0bc90701b8c5a3b1ac2b205688e9e69f10969ef97a965c52f9b33d5
.exe windows:5 windows x86 arch:x86

37786a880842818337de92a29ecef7c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetStartupInfoA
GetModuleHandleA
GetModuleFileNameA
GetUserDefaultLangID
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
_lopen
_llseek
_lread
_lclose
CreateFileA
ReadFile
SetFilePointer
CloseHandle
GetFileSize

msvcr100

_acmdln
_HUGE
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_initterm
_controlfp
malloc
_onexit
__dllonexit

Exports

Exports

VFPGetFoxrunData
VFPSetFoxrunData

Sections

.text
Size: 4.3MB - Virtual size: 4.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 262KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE