3ffeccd5f839785065dfdfaf57686641[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

3ffeccd5f839785065dfdfaf57686641.exe
Size

362KB
MD5

3ffeccd5f839785065dfdfaf57686641
SHA1

435b5e5fb699eea29ca098359c804fbcb381be64
SHA256

cdc147abb465b0c0feeecc4b762006d55c11892b91f2d62dcee13a74f41eecbb
SHA512

3e84e414ba34b19924d7993c52240fa30b447ff196c6f8c19f27e8cbc91d0ea35cb7342a4eeffbb51c4ccccfe6938298e95290d0e21207a9f3b2f5de707c3c90
SSDEEP

6144:fL4eK0s8M92oH3xLyx01buM9ZDbDpHW48zGs:fNKV8MBtyx0V9ZD4ms

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
3ffeccd5f839785065dfdfaf57686641.exe

Files

3ffeccd5f839785065dfdfaf57686641.exe
.exe windows:5 windows x86 arch:x86

490298ec3d59994d2a12f54c75b4c247

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalCompact
CommConfigDialogA
CreateProcessW
ClearCommError
InterlockedDecrement
GetCurrentProcess
SetEnvironmentVariableW
CreateJobObjectW
SetComputerNameW
GetTimeFormatA
GetCurrencyFormatA
GetConsoleAliasExesW
EnumTimeFormatsW
GetEnvironmentStrings
GlobalAlloc
SetFileShortNameW
LoadLibraryW
GetLocaleInfoW
ReadConsoleInputA
GetCalendarInfoW
SetVolumeMountPointA
GetFileAttributesA
CreateSemaphoreA
GetModuleFileNameW
CreateActCtxA
GetShortPathNameA
TlsGetValue
InterlockedExchange
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
CreateNamedPipeA
DefineDosDeviceA
GlobalFree
GetTempFileNameA
FindClose
LoadLibraryA
InterlockedExchangeAdd
CreateHardLinkW
GetNumberFormatW
OpenEventA
GetCommMask
GetModuleFileNameA
EnumDateFormatsA
GlobalUnWire
GetShortPathNameW
GetDiskFreeSpaceExA
GetVersionExA
SetFileAttributesW
LCMapStringW
VerifyVersionInfoW
GetComputerNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetStartupInfoW
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapSize
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ReadFile
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
GetModuleHandleA
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA

gdi32

GetCharWidth32A

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fara
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.noy
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

490298ec3d59994d2a12f54c75b4c247

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 283KB - Virtual size: 282KB

.data Size: 24KB - Virtual size: 70KB

.fara Size: 1024B - Virtual size: 1024B

.noy Size: 512B - Virtual size: 214B

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 283KB - Virtual size: 282KB

.data
Size: 24KB - Virtual size: 70KB

.fara
Size: 1024B - Virtual size: 1024B

.noy
Size: 512B - Virtual size: 214B

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 5KB - Virtual size: 5KB