3f2f1a0f6ea961831f80c5ce5324ec06a11fd7e7695d925b61af9e37996aad1d | Triage

Sharing

General

Target

3f2f1a0f6ea961831f80c5ce5324ec06a11fd7e7695d925b61af9e37996aad1d
Size

21KB
MD5

06bc957a9c594a42615833242759bb28
SHA1

25144f78fc6cdc4c739240abbea70313fe432822
SHA256

3f2f1a0f6ea961831f80c5ce5324ec06a11fd7e7695d925b61af9e37996aad1d
SHA512

ab49a73d2764aecb7ebf6b6098b5b562ebb03ae8de73cd241f83297429035b7e8eb52b5b5484b22d6133f6c6db8e87f7f24dd03c9a80e8d678450609aca98ccf
SSDEEP

384:h5qAIm1KD6Wc0YWpbbeA9FFVN0MlZBHf:vqJm2YWpbbZ9NJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f2f1a0f6ea961831f80c5ce5324ec06a11fd7e7695d925b61af9e37996aad1d

Files

3f2f1a0f6ea961831f80c5ce5324ec06a11fd7e7695d925b61af9e37996aad1d
.exe windows:5 windows x86 arch:x86

9ed54609127a70e312733e0fe986dabe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hh.pdb

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
GetTickCount
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpyA
GetCurrentThreadId

user32

wsprintfA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE