3bfa1166837d24ab8334a1a321a98d6b366f3cf4471d87d41892cb8060ec7e2d

General

Target

3bfa1166837d24ab8334a1a321a98d6b366f3cf4471d87d41892cb8060ec7e2d
Size

368KB
MD5

e2a3d6ccee7fdb711afddfb717ffc89e
SHA1

fba159aa31471513dacaef08406a4c6a4c9b8dd4
SHA256

3bfa1166837d24ab8334a1a321a98d6b366f3cf4471d87d41892cb8060ec7e2d
SHA512

5485c04227ed51768958d240c80e5653d7fa90eaa9242591470df127fc3a09b2f7ec0b0758d6f1eb589b1dd3e2d8736860601522f08febaa5acd05fdc732dde0
SSDEEP

768:kHwHDcEJoILigoTTHrEIfoTmMhUixwIldYjqppZ+AXr9hWHTJonZdVMQ:uwjcEJoI5oTTHDgT5LlmjCpfXjIorVM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bfa1166837d24ab8334a1a321a98d6b366f3cf4471d87d41892cb8060ec7e2d

Files

3bfa1166837d24ab8334a1a321a98d6b366f3cf4471d87d41892cb8060ec7e2d
.exe windows:4 windows x86 arch:x86

bb801224abd8562f9ee8fb261b75e32a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetLastError
HeapFree
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
CloseHandle
ReadFile
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
GetStdHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CreateFileW
InterlockedDecrement
InterlockedIncrement
CreateFileA
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
LCMapStringA
LCMapStringW

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shell
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb801224abd8562f9ee8fb261b75e32a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 8KB - Virtual size: 14KB

.shell Size: 320KB - Virtual size: 320KB

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 8KB - Virtual size: 14KB

.shell
Size: 320KB - Virtual size: 320KB