235fb71221d9f4b2f8b2785d7f895e9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

235fb71221d9f4b2f8b2785d7f895e9a
Size

476KB
MD5

235fb71221d9f4b2f8b2785d7f895e9a
SHA1

d372130edda3d2bbd9266a1d73f57a2fde293d14
SHA256

638405b7e9b68e8ee515e8c44aababcbdb43ba1cc45560145351ed08fabf9b46
SHA512

9c2f967b0f216a61b68146b861be36379ae229a8e0b09e20d83101bdb717f5e8ea35ea4223fe3d2b91b04e5b67e706fed507ee10eef8189ee142decb1698d8ce
SSDEEP

12288:i7hGmQTOz4H6b59ygqXmJrd6F9aNnDjy0iPW0Hp0g8:a5mOMQArmlqU/sJ0g8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
235fb71221d9f4b2f8b2785d7f895e9a

Files

235fb71221d9f4b2f8b2785d7f895e9a
.exe windows:5 windows x86 arch:x86

cdc21224a3401df04202aed5666bc3a1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptCreateHash
RegDeleteValueA
RegQueryValueExA

kernel32

GetTimeZoneInformation

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIW
StrStrW
wnsprintfA
wvnsprintfA

user32

CharUpperW
CloseDesktop
EndDialog
GetDlgItemTextA
GetMessageA
GetWindowTextA
LoadCursorA
MsgWaitForMultipleObjects
SetThreadDesktop

Sections

.ghapez
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gpal
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vqr
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ