35f78ced5c54006d29e7228b7920f6b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35f78ced5c54006d29e7228b7920f6b6
Size

156KB
MD5

35f78ced5c54006d29e7228b7920f6b6
SHA1

5fba9a6ece904b93bdbcba2486ffabcf4141487c
SHA256

44b476ae6d2b611e5941475a886299fb30f4609eb27939b6e46a01963ea327e4
SHA512

dac44970855743ed9eb650ce4290392ea6c6bd7e11c6ad214414b1224cfb4fabfb1d635200c84cf5e4c5b53a23f8cc067f75ee37552063113973eec7609fc7fd
SSDEEP

3072:RDR4RRKyYuJsL53mWbyqu1cISyySBHo7VUfNctZVMY8o/SHSRWUWyF1X4YYj:X8yuJipmWbFu1cIXXloRUapMYlaHR1y4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35f78ced5c54006d29e7228b7920f6b6

Files

35f78ced5c54006d29e7228b7920f6b6
.exe windows:4 windows x86 arch:x86

bd95e81826cc0b0797cecbbd03259640

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

opengl32

glColor4dv
glTexEnvi
glColor3sv
glGetFloatv
glTexCoord2iv
glEvalCoord1d
glGetError
glColor3ubv
glLightiv
glDrawBuffer

glu32

gluTessEndContour
gluDeleteQuadric
gluQuadricDrawStyle
gluBuild1DMipmaps
gluEndTrim
gluPwlCurve
gluPickMatrix

oledlg

ord8

advapi32

RegDeleteKeyA
RegUnLoadKeyA
RegCreateKeyExA

msvcrt

_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__setusermatherr

kernel32

ExitProcess
GetPrivateProfileIntA
DeleteFileA
GetCurrentProcessId
CopyFileA
GetCurrentThreadId
GetModuleHandleA
GetPrivateProfileStringA
HeapLock
VirtualAlloc
GetStartupInfoA
GetProcAddress
VirtualAllocEx
CreateEventA
LocalLock
WaitForMultipleObjects
GlobalHandle
OpenSemaphoreA
GetOverlappedResult

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 379KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ