369e9b5a0fa95721e4ca0b039b88ac86 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

369e9b5a0fa95721e4ca0b039b88ac86
Size

347KB
MD5

369e9b5a0fa95721e4ca0b039b88ac86
SHA1

382e6ba3f087c8b9a28b6e1d2f6f784c20e9b11b
SHA256

54efa9ae6dad92106000a62cb06addfbe43fe859b0b75a1aecebb19ea7fd01d6
SHA512

796dd2887c510a401cef06f05977d5dd0dccf663c9695a5c32bba7dc496f2e1bd05824b979dec6cf34655ab5779b20f06e4e04b3848988ff287760c9f84fd166
SSDEEP

6144:Etk78oVtmIuoUsCRV7l0O+yw1Hs01wIfTHaG1jWwXvd:4kIOMvoeeywxs0uWLTkM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
369e9b5a0fa95721e4ca0b039b88ac86

Files

369e9b5a0fa95721e4ca0b039b88ac86
.exe windows:4 windows x86 arch:x86

6aa202696630ef9bdb8a7dab7ac80bae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PulseEvent
TlsGetValue
GetModuleHandleA
Sleep
lstrcpyA
SetLastError
CreateProcessA
CloseHandle
GetCurrentThreadId
UnmapViewOfFile
lstrlenA
GetCommandLineA
GlobalUnlock
GlobalFree
HeapCreate
GetEnvironmentVariableA
LoadLibraryExW
FindResourceW
CreateFileW
GetComputerNameA

user32

SetFocus
GetCaretPos
GetDC
DrawEdge
DispatchMessageA
CreateIcon
IsWindow
GetDlgItem
DrawMenuBar
CreateWindowExA
CallWindowProcA
CheckRadioButton
FillRect

rsaenh

CPSignHash
CPDecrypt
CPHashData
CPGenKey
CPDeriveKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 271KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ