32cdfc743cbdcccf8fd44f42577fd12a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32cdfc743cbdcccf8fd44f42577fd12a
Size

248KB
MD5

32cdfc743cbdcccf8fd44f42577fd12a
SHA1

35a223843ce24ba50970bca1c56c5edd739a58d8
SHA256

71480fb95dd40690ac76148aae7e8dfe1a377bccd7a4ca8dbd3c572c771f707f
SHA512

78c18a4611017c2ef53b8668112087b7bef6a6baeb30e34afe82c93ba0713cf416b31e7723a4c95744664b708344176b535c79d91abee9bc224e394036b9dd77
SSDEEP

6144:freHP0iIqlhd2W5Knq+ciyKEAGFumWcfXorHRjB4djpx1rss:DJiI4don2iX+0rRd4dlx1r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32cdfc743cbdcccf8fd44f42577fd12a

Files

32cdfc743cbdcccf8fd44f42577fd12a
.exe windows:4 windows x86 arch:x86

b6231e1d9778a98175f8d5512c7cf401

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
GetCurrentThreadId
LoadLibraryExW
HeapCreate
GlobalUnlock
CloseHandle
UnmapViewOfFile
CreateFileW
Sleep
GetEnvironmentVariableA
CreateProcessA
lstrlenA
SetLastError
lstrcpyA
GetCommandLineA
GetModuleHandleA
PulseEvent
GetComputerNameA
FindResourceW
TlsGetValue

user32

GetCaretPos
CreateIcon
GetDlgItem
SetFocus
DrawMenuBar
FillRect
CheckRadioButton
IsWindow
CallWindowProcA
GetDC
DispatchMessageA
CreateWindowExA
DrawEdge

rsaenh

CPDecrypt
CPGenKey
CPSignHash
CPHashData
CPDeriveKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 206KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ