035707591188b55d8a2fdd869f3cab3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

035707591188b55d8a2fdd869f3cab3d
Size

155KB
MD5

035707591188b55d8a2fdd869f3cab3d
SHA1

b0b7bba621259c4caae8bfecc51660cd10982433
SHA256

ecf0567e7e889059da602b60938c244bf89d404be921d89a97934ebc3150cb38
SHA512

876d46a0b71efec9f2225ae0d3bad1a752cb7c31d001a9b2ed90f7ea3e0aa642744512bcca52edc396fc8b3ef5043904496cf3a61b5a831943640bf278029d56
SSDEEP

3072:2KjLjTxzlhJ9yCaRQ3ffiQAu/90+Je2FgGWU4:1DTtXHylQ3fqjkdJei1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
035707591188b55d8a2fdd869f3cab3d

Files

035707591188b55d8a2fdd869f3cab3d
.exe windows:4 windows x86 arch:x86

c4e541c2e9c7fe80d9312bf749c0005f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
CreateWindowExW
GetDC
MessageBoxW
LoadCursorW
GetUpdateRgn
GetWindowInfo
EndDialog

oleacc

LresultFromObject

kernel32

FindFirstVolumeMountPointA
TlsAlloc
GetProcessId
TlsGetValue
EnumResourceTypesA
InitializeCriticalSection
ProcessIdToSessionId
TlsFree
GetStartupInfoA
GetFileType

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ