3542a9575cf8c23c3e8b094277f8dca1 | Triage

Sharing

General

Target

3542a9575cf8c23c3e8b094277f8dca1
Size

57KB
MD5

3542a9575cf8c23c3e8b094277f8dca1
SHA1

aefb96c9f44a6e43fed675fd30f3ceec013438a1
SHA256

87f2238656bc923890f6b6695dfb40c318fb1ba84744ad2b910c399c5d5965b7
SHA512

b093c885024a24e877ba37241df0e9688a58197c332f0da40b33f6ffd51dc1f9fb96bb18e352ef0d6cf1ef23be24ba9d43e044700c1cdcc2efa78b2513b6ac0c
SSDEEP

1536:6SRnCIK5oAuKP80NyEjxIhGP5+6q+xoy:6SRrAY0NyIjIdUz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3542a9575cf8c23c3e8b094277f8dca1

Files

3542a9575cf8c23c3e8b094277f8dca1
.exe windows:4 windows x86 arch:x86

36e1820d27b3e70804a7e91b356b3115

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA
SHGetSpecialFolderPathA

kernel32

CloseHandle
lstrcpyA
lstrcatA
WriteFile
SizeofResource
LockResource
LoadResource
GetModuleHandleA
GetModuleFileNameA
FindResourceA
ExitProcess
CreateFileA

Sections

.text
Size: 512B - Virtual size: 380B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 442B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE