352b53ef938d35cd0b53296a8048cff1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

352b53ef938d35cd0b53296a8048cff1
Size

72KB
MD5

352b53ef938d35cd0b53296a8048cff1
SHA1

1a82bf804c039b62841ad1b7294fedebb6ad45f8
SHA256

26fe9b0d10abe9520bfd916940163fce121e423c4062c73b6970a480028b5a82
SHA512

0f6aafc9f81fcd898251dc61b8492594d560bf48f141a7df308e5119d681e268801c853f8d7407cf54b5204897a29675291a2dd6bb798d42b748bad05eb19b13
SSDEEP

1536:omb5qf2GGUPMWLpbQ/UTO7bD7kz2sTdK7h+8:9hUrccYD7MTd4h+8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
352b53ef938d35cd0b53296a8048cff1

Files

352b53ef938d35cd0b53296a8048cff1
.exe windows:4 windows x86 arch:x86

c845aa8adfd876d2c91192a47e902163

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
lstrlenW
GetPrivateProfileStringA
WriteFile
GetCurrentProcessId
GetDriveTypeA
ReleaseMutex
FindAtomA
GlobalFlags
FindClose
CreateEventW
GetCurrentThreadId
GetEnvironmentVariableW
TlsGetValue
ReleaseMutex
HeapCreate
LocalFree
InitializeCriticalSection
IsBadStringPtrW
LoadLibraryW

user32

GetSysColor
GetSysColor
CreateWindowExA
GetClassInfoA
IsWindow
EndDialog
CallWindowProcW
GetKeyboardType
SetFocus
DrawTextA
GetClientRect
DrawStateW
DispatchMessageA

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

clbcatq

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE