335c1c134b7114d27a2996d70151493d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

335c1c134b7114d27a2996d70151493d
Size

175KB
MD5

335c1c134b7114d27a2996d70151493d
SHA1

f1ba8b48286c6a7fe7f6d32eb12afdf0ddc4201a
SHA256

5abd9b6f5cac34ec0ac6587a27d235fe2acbc51c50f787fffecb5edb94eaa7de
SHA512

91ffe27e534147ca3d23844e288d8108028873f1a788bcefb73c43afc70943985999590da21bb7a1f7ed065b0d939daf6d5acb2c9926dbec890c5031dc53eb6d
SSDEEP

3072:et01ITLAhGcKzdCfH9rwbRIzC6d1DBXas7IXBsRQIYzmpWj5:+0uTEhyzwH9r8azC6DDBT7oBsRzumpW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
335c1c134b7114d27a2996d70151493d

Files

335c1c134b7114d27a2996d70151493d
.exe windows:5 windows x86 arch:x86

68494bfb8edba9f25327675a9d26c4a8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDialogBaseUnits
GrayStringW
CreateMenu
IsWindow
DeferWindowPos
GetDesktopWindow
GetMenuState
SendNotifyMessageW
GetForegroundWindow
AppendMenuW
CloseDesktop
IsZoomed

kernel32

GetModuleHandleA
GetOEMCP
PulseEvent
CreateThread
CreateDirectoryA
GetFileInformationByHandle
SetNamedPipeHandleState
lstrcmpiA

psapi

QueryWorkingSet

shlwapi

PathUnmakeSystemFolderA

advapi32

RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA

Exports

Exports

_ExitWindowsExExitWindowsEx@0

Sections

.text
Size: 137KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ