35ca86d07a25024facfab2e41e660a36 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35ca86d07a25024facfab2e41e660a36
Size

3.3MB
MD5

35ca86d07a25024facfab2e41e660a36
SHA1

54f4e4ca0e9d99f61922d10c9d46a1474e49353c
SHA256

2151418ac150737c092486c7fd026dc47736b485bd5370e673e0717b2da6611c
SHA512

bcbbe69444c28c9519087bbc6ba95147983d7d8fef830d0e44f3c8f54d6bb9c8ee37439c107a02792e7d6f03ac48b239a0fe77c6a65fe1696459370ccfd2b3e9
SSDEEP

98304:GK/oQWfgZgVAp9XbtPZTpzwM7zK9Ov9c47/FCV:PAQ6gZgV0htPRpzZ/nVc24V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35ca86d07a25024facfab2e41e660a36

Files

35ca86d07a25024facfab2e41e660a36
.exe windows:5 windows x86 arch:x86

a9a40a8f90483fa79b633b308d37f18f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetVersionExW
LeaveCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetWindowPos

Sections

.text
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata0
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata1
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ