34c44dba039a5a051e7fa9449598defe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34c44dba039a5a051e7fa9449598defe
Size

38KB
MD5

34c44dba039a5a051e7fa9449598defe
SHA1

d2003750124a55c7e43934b39f7e62e4868e1323
SHA256

e7ea341bf8ac5429caeda232a0a5bc752d2b90ab763e89829d6b994fbc9748b5
SHA512

bb01066ee2149e727b7bcfafa9f28479b60d4012fe835fdb47f7948910fb7548733931024194f65b14c991c6659295ea99a2ba13601e3ca61e7dbf80753206f3
SSDEEP

768:EoGBwgQ9xh7miRJsKue84EZ43eX/rUI/w9bbVAAtFPoIlan8d:EoGBwgc7miL85ZGWQIohZAAfm8d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34c44dba039a5a051e7fa9449598defe

Files

34c44dba039a5a051e7fa9449598defe
.exe windows:4 windows x86 arch:x86

9e1048df170a525bae12059b67d988f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree

user32

IsIconic
GetWindowTextLengthA
GetParent
GetWindowLongA
GetForegroundWindow
CloseWindow
GetClassLongA
GetClassWord
ShowWindowAsync
TileWindows
GetLastActivePopup
WaitForInputIdle
IsWindowUnicode
SetParent
AnyPopup
GetTopWindow
SetForegroundWindow
wsprintfA
IsZoomed
UnregisterClassA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 794B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE