346f2a207c39a81489c1902229cab75c | Triage

Sharing

General

Target

346f2a207c39a81489c1902229cab75c
Size

64KB
MD5

346f2a207c39a81489c1902229cab75c
SHA1

a7658be38451f1c8c85e925b62fa762890cdcaa4
SHA256

5f649def718c15e4d440c45617195f2bddf667f0bf8a7747693a872c1e876d65
SHA512

626a77864bf3c77913ea3f6614af8fc331919df8c5528b09e82f0ed6845f8538bbe387b6dc11aed3c77222ba5cae3679a0df1ca19660cd284fa7f2dbc6908616
SSDEEP

1536:OudQailKET1c8TG1mS5nQzeZzLqNVH09D8EAOjgj7KS:zQailr5fTG1mSUgza09D8EC1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
346f2a207c39a81489c1902229cab75c

Files

346f2a207c39a81489c1902229cab75c
.exe windows:4 windows x86 arch:x86

7c90f8d9faafd0adef2078a8a5be1ef8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
GlobalAlloc
GlobalLock
GetSystemDefaultLCID
SetInformationJobObject
GetUserDefaultLCID
GlobalFree

tapi32

lineSendUserUserInfo

dsound

DirectSoundFullDuplexCreate

Sections

.data
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE