39de321b36e56e149433b9d301188d80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39de321b36e56e149433b9d301188d80
Size

53KB
MD5

39de321b36e56e149433b9d301188d80
SHA1

857021938fdf372a9776fae65107e7395ca2ed98
SHA256

58df6eb415f7e90f74c859abc00eb60a8e015da675ec53cb73edba58ba484869
SHA512

f0da1e112d09dc44f8c353ef9df56d25660c94d4d66b8f7452a2c6afc98eb2eb31fe9b48bc95788860050ed22c7eaa1843ada3b47550fd26c19172dc083bbdef
SSDEEP

1536:aJUwMdipUMrF97W0RkoeNfVwrrIEHzJBOp/UvFI:aJrMyhRpehqoSzHw/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39de321b36e56e149433b9d301188d80

Files

39de321b36e56e149433b9d301188d80
.exe windows:5 windows x86 arch:x86

14656e351c2621612f781ff4e5917f63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

GetFileTime

shlwapi

PathFileExistsW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIW
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseWindowStation
DispatchMessageA
EndDialog
ExitWindowsEx
GetClassNameA
GetForegroundWindow
GetWindowTextA
GetWindowThreadProcessId
PeekMessageA
SetThreadDesktop

Sections

.mlcj
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pmlur
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tyv
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ