350d4f2105256a0aab1a66179b5e625d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

350d4f2105256a0aab1a66179b5e625d
Size

129KB
MD5

350d4f2105256a0aab1a66179b5e625d
SHA1

2ae25225bceec051dfa497bae9bae58347bd5680
SHA256

83fdeabf29e684d3dd255fa8afbe4bce8085133e3c20609df7586aa6a90dae53
SHA512

66fdaa2d3b3020455b1baa9cc4988d617256664e1aedd39a6da31e45ac2930fb79bf3a10bc71ad6924cd510d8b116e4faf87fe94b854b692710e6d36d1500a79
SSDEEP

3072:U5C6GXMp2t9kfG9enh+VnSAY9nBnXnsAXMz2NZSCfPGO1NLoNFzbyl4akWZ1C4X1:YzjcsXMzgZ/fPGQRoNlbylLg4cy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
350d4f2105256a0aab1a66179b5e625d

Files

350d4f2105256a0aab1a66179b5e625d
.exe windows:4 windows x86 arch:x86

f280b9e94e865bed91882d09e26e36eb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo
CloseHandle
ExitProcess
GetLastError
GetModuleHandleA
GlobalFree
ResetEvent
SetEvent
Sleep
WaitForSingleObject

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ