328b18d28544f8f8d88cb8fd5b84c32a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

328b18d28544f8f8d88cb8fd5b84c32a
Size

118KB
MD5

328b18d28544f8f8d88cb8fd5b84c32a
SHA1

ae98e1b55e64c581316fcc8d25b907f76e0289c4
SHA256

e58ab869c4adc0b3c05177bf230ef7f06d882dc990c3df2a9b5f83d9c5f7ead7
SHA512

2ddec3b1f691efe348c3c15d4480b43c86b8cb88a6307d44b90f4df9d0ae85adc326de7443c950f19650e9b1856c15c119b49cfdb1997a38aae00ee90dccd08d
SSDEEP

1536:79ydisT2TzsP1zjaiTlHuVkLCO+m7RIj80UhBaSN7Z7kuwXIzQ08Pi6HA8mm3Zvu:wim2c1XxOOLZl7ReIX7JkuUMW3ZvF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
328b18d28544f8f8d88cb8fd5b84c32a

Files

328b18d28544f8f8d88cb8fd5b84c32a
.exe windows:5 windows x86 arch:x86

1eb491fb619101506a4591c311089a39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
GetDesktopWindow
CharNextA
GetDC
GetSystemMetrics
GetParent

gdi32

SelectObject
SelectPalette
LineTo
GetClipBox
RestoreDC
DeleteDC
GetDeviceCaps
RectVisible
GetStockObject
SetMapMode
GetObjectA
DeleteObject
SetTextAlign
CreatePalette
SetStretchBltMode
SaveDC
CreateCompatibleDC
CreateSolidBrush
CreateFontIndirectA

kernel32

GetModuleHandleA
CopyFileA
lstrcmpA
GetSystemTime
lstrcmpiW
QueryPerformanceCounter
DeleteFileA
GetCommandLineA
GetWindowsDirectoryA
GlobalFindAtomA
lstrlenA
RemoveDirectoryA
RemoveDirectoryW
FindClose
lstrcmpiA
lstrlenW
VirtualAlloc
VirtualFree

glu32

gluNurbsCallback

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ