0354f9d7982b672165d85ce64baf6298 | Triage

Sharing

General

Target

0354f9d7982b672165d85ce64baf6298
Size

19KB
MD5

0354f9d7982b672165d85ce64baf6298
SHA1

e4932a08f896d30b06444184d8f1277b2ad31434
SHA256

5fe1ac1b0d7843e91514349c83e8f91bb994f02194bdb6defc7761942015e26a
SHA512

e30f87ee368600aef055b5b23d71bb8f1719dd2155157ea2a39e4f010d2863c192538ae7e13f1e83dd07b41675c58d22c72f8e2ef0c6dd6d2d2539c602d0a840
SSDEEP

384:W0Nl92RogEgUNC8GaiVnxF7ohK+MTGnHycSVmhIsmpmN98rVoQ0itN1:W6JgUNCeWXohK+0cSmHMmN98r2QT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0354f9d7982b672165d85ce64baf6298

Files

0354f9d7982b672165d85ce64baf6298
.exe windows:4 windows x86 arch:x86

6785969b4784e4c84bca5dc94af9d926

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentProcess
GetEnvironmentVariableA
GetFileTime
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
FindResourceA
GlobalAlloc
GlobalFree
LoadLibraryA
LoadResource
MoveFileExA
OpenFile
SetFileTime
SizeofResource
WriteFile
ExitProcess
CreateFileA
GetVersionExA
CloseHandle

user32

wsprintfA
MessageBoxA

advapi32

RegCloseKey
RegDeleteKeyA
RegCreateKeyExA

msvcrt

_wfopen

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ