35b79ef595cd7a4fd375bab50fb26b16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35b79ef595cd7a4fd375bab50fb26b16
Size

64KB
MD5

35b79ef595cd7a4fd375bab50fb26b16
SHA1

bb3644707e6c60da01882819298a26b7a343e4fb
SHA256

3bf205be68876bc7f038b9c84ea60bb8a553e2d8d02a733d92958169020684bd
SHA512

39affd426d13be8d893b8e0c65817af806a706505f2ee5a3818ae7dffbd4aba1b2accfe99048c9ca8f4cedc1d33d405569cc4b73ce8489c071b87bdeb87f6ad6
SSDEEP

1536:YnHsGyCqarm2euXqdddddddddddddddddddddddddddddddddddddddddddddddp:WMGyTvQXNJNdwT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35b79ef595cd7a4fd375bab50fb26b16

Files

35b79ef595cd7a4fd375bab50fb26b16
.exe windows:4 windows x86 arch:x86

3f3ad6165d4735a58f98c0ee207b2ae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
IsBadStringPtrW
lstrlen
HeapCreate
PulseEvent
FindClose
TlsGetValue
CloseHandle
CreateFileA
GetACP
TerminateThread
GetModuleHandleA
GetEnvironmentVariableA
Sleep
CreateMutexA
ReleaseMutex
LoadLibraryW
GlobalUnlock
LocalFree
FindResourceA

user32

SetFocus
GetDlgItem
CopyRect
CallWindowProcA
DefWindowProcW
GetDC
GetIconInfo
FillRect
DrawMenuBar
DispatchMessageA
CheckRadioButton
DrawEdge
IsWindow

msasn1

ASN1BERDecNull
ASN1BEREncBool
ASN1BERDecBool
ASN1BEREncEoid
ASN1BERDecCheck

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE