35d9da9ffd882312a46b46cc07544ba2 | Triage

Sharing

General

Target

35d9da9ffd882312a46b46cc07544ba2
Size

343KB
MD5

35d9da9ffd882312a46b46cc07544ba2
SHA1

78d1ec1b87fc1ca8768631cf7f90eb3f341b94a4
SHA256

77f729750c4b93852442a178d2cbd20c4ce5945ca27369eb8acc894988abed11
SHA512

9e0e14db9bc70f2ef923acf91891a6ba7cd4a6bac15dde09da16dba5314b4ad9b4252c8a2640df8daa4170865ec2bcb83320a15fdb0984e47a2ae484f1a17019
SSDEEP

6144:x0KFRLRSP0NJVF8QgbK9Z+TUH3h5D70tdHnBZS9CpRAXVffqHNctY0:tRL1Nnu1aJglBZS0AXwtcR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35d9da9ffd882312a46b46cc07544ba2

Files

35d9da9ffd882312a46b46cc07544ba2
.exe windows:4 windows x86 arch:x86

283e7dcd71282cff782748d5286b4325

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
VirtualAlloc
GetFileAttributesA
GetModuleFileNameA
HeapAlloc
VirtualProtect
lstrcmpiA
GetTickCount
ResetEvent
GlobalUnlock
GetFileTime
FindFirstFileW
GetSystemTime
CreateMutexW
lstrcmpiW
CreateThread
FindClose
CreateProcessW
GetFileSize
HeapFree
GetUserDefaultUILanguage

user32

GetKeyState
CloseDesktop
FindWindowExA
DrawIcon
MsgWaitForMultipleObjects
GetClassNameA
CharLowerBuffA
EndDialog
ExitWindowsEx
GetWindowLongA
GetClipboardData
GetForegroundWindow
GetWindowThreadProcessId
GetIconInfo

advapi32

CryptAcquireContextW
CryptCreateHash
CryptGetHashParam
GetUserNameW
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
DuplicateTokenEx
CryptHashData
RegEnumKeyExA
RegQueryValueExA

shlwapi

PathCombineW
PathFindFileNameW
PathRemoveFileSpecW
StrStrW
wvnsprintfW
wvnsprintfA
StrCmpNIA
PathFileExistsW

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE