535a660ca7e3b68f8bb2841c68377a94 | Triage

Sharing

General

Target

535a660ca7e3b68f8bb2841c68377a94
Size

1.2MB
MD5

535a660ca7e3b68f8bb2841c68377a94
SHA1

a495994937dff3badab6d828219f7b179665b516
SHA256

8f6a8257d7eacb48d19f82a88b80cb32938911a4a5a981a9e2e63e71be282713
SHA512

6eaaa6b2a0b96c69a2255e201a9032030a08818ea8f812242530061f6d7ba2e095f6835400b39c0f52c88c2fb5a846da52b0b86c337248f83d2d2ff82ca34e6c
SSDEEP

24576:pKLKt4iaepqxfzNUcq3v/9TcxcE41Ag0whdC1WjphLJNd72XhF47DwrgORT5YTTQ:pKs4idqRec4v/9auT5E10pBJ7IhF4oMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
535a660ca7e3b68f8bb2841c68377a94

Files

535a660ca7e3b68f8bb2841c68377a94
.exe windows:5 windows x86 arch:x86

032bffe5df3b5e047e6b7399274af60e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FindResourceA
LoadResource
GetTickCount
GetWindowsDirectoryA
WriteFile
Sleep
SizeofResource
CreateProcessA
LockResource
GetCurrentDirectoryA
CloseHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

msvcr90

_crt_debugger_hook
srand
rand
sprintf
memset

Sections

.peglue
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ