34a39185fd30721cfd673dfdec64892b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34a39185fd30721cfd673dfdec64892b
Size

200KB
MD5

34a39185fd30721cfd673dfdec64892b
SHA1

4f558e6ac9658a217f4990411630ce4af293763a
SHA256

21fcf77aea02ebaa05fde2fc5eb972e8fcd5202133c8e6673c8d40cceefa3b47
SHA512

f1e85200e1d30d7e6a97a8a7e544e003eb852d3ca825ac86b83b54e68623a0e2a7f3ed13a29ce4579b39a5bb32ce6c4af22f1f7fc38e899d11983f39c13dbbc8
SSDEEP

3072:H1fGhEa7aAWXuCRGIq1OaGuMjyyjO3ec4H3ZLvnQTRXSr:H1FTuWW1OyR3ep35vSW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34a39185fd30721cfd673dfdec64892b

Files

34a39185fd30721cfd673dfdec64892b
.exe windows:4 windows x86 arch:x86

2a2f7a7ec5298e579126a6e9c6c42701

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetConsoleTitleA
GetLastError
Heap32First
FreeConsole
IsDebuggerPresent
CloseHandle
GlobalLock
VirtualProtectEx
lstrlenA
LoadLibraryExW
IsBadReadPtr
ResetEvent
LocalFree
GetModuleHandleA
CancelIo
SetLastError
EnumResourceTypesW
CreateMutexA
GetStdHandle

user32

IsIconic
CopyImage
EnumWindows
GetDlgItemTextA
EndDialog
GetDlgItemInt
GetMessageA
GetMessageA
CreateWindowExA
DialogBoxParamA
GetParent
GetKeyState
CloseWindow
MessageBoxA

setupapi

MyFree
MyRealloc
MyMalloc
SetupCloseLog
IsUserAdmin

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ