39dd25f9758f2c6a5f8b5fd69e7aba12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39dd25f9758f2c6a5f8b5fd69e7aba12
Size

52KB
MD5

39dd25f9758f2c6a5f8b5fd69e7aba12
SHA1

a31d514a46266ba1296729a41c6a9dd1ca707804
SHA256

85b589dc2f06af6bb2f521983a088f7b7c41156f1ab43f9e1b29e8eceab142f4
SHA512

6c53e2c7cafe5b5ffc4f56c78d377043be6482f0e71383fe32f96edaeb2ad0722e1cad3a6422d6b1cb5883434673411574a7f3bce9e33653962f4e0cffb45bb9
SSDEEP

1536:yuedbn7jMbfbj/Tb+JQCOUjiSrMAR77Zha:vedwbzjvFCOORR7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39dd25f9758f2c6a5f8b5fd69e7aba12

Files

39dd25f9758f2c6a5f8b5fd69e7aba12
.exe windows:5 windows x86 arch:x86

1b3f6f7e8b1e7a4bf56d07beb83511b4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA

kernel32

lstrcpynW

shlwapi

PathCombineW
PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
StrStrW
wvnsprintfA
wvnsprintfW

user32

DispatchMessageA
DrawIcon
GetClipboardData
GetForegroundWindow
GetMessageA
GetWindowLongA
GetWindowTextA
OpenWindowStationA
PeekMessageA

Sections

.ebcj
Size: 43KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ngjsx
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kpqb
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ