38356037cf8ed5a133f9697e8012a365 | Triage

Sharing

General

Target

38356037cf8ed5a133f9697e8012a365
Size

81KB
MD5

38356037cf8ed5a133f9697e8012a365
SHA1

3fbf3cd648ba1c8592f28f063d23b9e1790e4d0c
SHA256

e233f64148e06c1d35a4b3bf31113bb2536ab9dd025a3b5b7d8c71da97722a3e
SHA512

7277fcad006766644910cd92b9f0631a538fd214a02ef395a3d67679d3e3f1afcf545d3f1c25aa9f8c2b1c5aa26d3e315fa9e7aee1fe7701ed05b5a2b77f9294
SSDEEP

1536:j/neRC5/wmroN04LYWC1CblMCn5uDI6tlRh7gZVv2MAH6+gx5r:f5omrPkounIsYRhcGMzb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38356037cf8ed5a133f9697e8012a365

Files

38356037cf8ed5a133f9697e8012a365
.exe windows:4 windows x86 arch:x86

796b10f599be0ee9dcf6cd6f77a3794c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess

user32

DrawTextExA

gdi32

AddFontResourceA

comdlg32

GetSaveFileNameA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoCreateInstance

comctl32

ord17

Sections

pec1
Size: 22KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE