535fbdddda594ba2fe02ce6020937aca | Triage

Sharing

General

Target

535fbdddda594ba2fe02ce6020937aca
Size

50KB
MD5

535fbdddda594ba2fe02ce6020937aca
SHA1

f18bfa30931006fcb368e52fa631c6c7bf909d42
SHA256

264e209dccf838b14fa4343c82408e0233d72bf32dd6a1ccb7852a3c426e93c7
SHA512

a4fb1e6d9240761cbe09a42edd40d19d1c1800aa67a8d771e9c6c01a4408483a35ca0cbb57f04e7b71575dab3523fd7aacbd6ed1e9009ea3e814760d981ead8e
SSDEEP

1536:qGrkucOS1p5Erv/6BI7fkGV4zzv3W3y5Eob2:hhPgsjOMfkGV4zzv3oyj6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
535fbdddda594ba2fe02ce6020937aca

Files

535fbdddda594ba2fe02ce6020937aca
.exe windows:4 windows x86 arch:x86

3ffa6d2f82e5c0927fa5d3e12c480a83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeviceIoControl
PulseEvent
GlobalLock
GetTickCount
GetDriveTypeA
RtlUnwind
DuplicateHandle
VirtualQueryEx
HeapFree
ResumeThread
ReadProcessMemory
lstrlenW
FreeEnvironmentStringsA
InterlockedExchange

msvcrt

wcsstr
wcsncat
_fullpath
strncat
malloc
ftell

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE