3d939f1a2b09579365e1a04fa945cca40c9490de8ae9a5460683746315c1523fN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d939f1a2b09579365e1a04fa945cca40c9490de8ae9a5460683746315c1523fN
Size

56KB
MD5

f435a7955cd28209af6e6eed27b898b0
SHA1

d65cebd12431447ec3dbf7422eb2b066b8034074
SHA256

3d939f1a2b09579365e1a04fa945cca40c9490de8ae9a5460683746315c1523f
SHA512

01f50a5538c3baa1764801ac8f382374cc1ef989af354e0f803be5610ccdba5b8f91d4492da0c85ac4ac9624612c854a90c636a5d0d042229079749c37dac2ae
SSDEEP

1536:4ZTxLo7d11QRiBDjlpagteY5DS4281tNhFzMWNE73W:4ZTCx4ifp3teYVSj8xgyE73W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d939f1a2b09579365e1a04fa945cca40c9490de8ae9a5460683746315c1523fN

Files

3d939f1a2b09579365e1a04fa945cca40c9490de8ae9a5460683746315c1523fN
.exe windows:4 windows x86 arch:x86

3a0d9d9d1d8666b950d2a92e341a5736

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TzSpecificLocalTimeToSystemTime
QueryActCtxW
RemoveVectoredExceptionHandler
RaiseException
GetDiskFreeSpaceExA
MoveFileWithProgressW
EnumResourceNamesW
Process32FirstW
GetVolumeInformationA
LoadLibraryExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE