535a05a03a1a125a8b9cd43ea95c0048 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

535a05a03a1a125a8b9cd43ea95c0048
Size

132KB
MD5

535a05a03a1a125a8b9cd43ea95c0048
SHA1

7a24ac4877b2e4fbd652e7cf98e3088c71365b5e
SHA256

9d7850b84226ad42616f058068ca79d55fd46c382a8c959561bc5dbf1a97c802
SHA512

e704d4d7689a92e77255536f90f345352ade582dd1062ba8a0837dfb2a8fdb9ed6a6ff83f263097922ccc6fd6d1f426e989fb7d08f97f7eb6fa7feef7e3588fe
SSDEEP

3072:KoBHDlCC7VKZRPxE5NwX3KioIQPzFQgESQfozgtlwQCMJq:57V2Pi5NU/UbvQgzClwQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
535a05a03a1a125a8b9cd43ea95c0048

Files

535a05a03a1a125a8b9cd43ea95c0048
.exe windows:4 windows x86 arch:x86

766197461e27b30669e08442d7d124c0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetCurrentDirectoryA
CompareStringA
GetProcAddress
VirtualAlloc
GetTickCount
LoadLibraryA

user32

TranslateMessage
GetMessageA
DispatchMessageA

oleaut32

VarRound

ole32

CreateObjrefMoniker

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ