330978b7cb9b52355643b099a21614c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

330978b7cb9b52355643b099a21614c3
Size

838KB
MD5

330978b7cb9b52355643b099a21614c3
SHA1

50b5be3f89088d7378b692f869cf4d0b36da0ff8
SHA256

1886d65f832bb72f955d3c20a49e71a8d44f8fabfef34720c983b9fc7b8922c2
SHA512

d40714fd1eba40f47b506d7f25e975ec6f4e87c0d3ad11bec1eb35c5dff00dc0d68a2de107b90525957f7f163e51fdf21e0ef0ecd0239c3a1e3db01194726372
SSDEEP

24576:/nLjjk+cQNrVI7AxKnhnD11CqNU7EI+1CX:/nLvk+vTIkMnhnDbXsEIgCX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
330978b7cb9b52355643b099a21614c3

Files

330978b7cb9b52355643b099a21614c3
.exe windows:4 windows x86 arch:x86

94b064e622e9ebc5c825af6716c889e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
Sleep
SetEvent
GetTickCount
UnmapViewOfFile
GetComputerNameA
SetLastError
LocalUnlock
CreateThread
GetModuleHandleA
LocalFree
HeapCreate
LoadLibraryW
CreateThread
GetSystemTime
lstrlenA
GetCommandLineW
GetCurrentDirectoryA
CreateFileA
PulseEvent

user32

FillRect
SetFocus
GetScrollBarInfo
GetKeyState
GetDlgItem
DrawEdge
CheckRadioButton
CallWindowProcA
CreateWindowExA
DispatchMessageA
DrawMenuBar
IsWindow
GetDC

clbcatq

SetSetupSave
DowngradeAPL
UpdateFromAppChange
CheckMemoryGates
SetupOpen

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE