a33a350f308d8947fa9c8fc9bf9567f4 | Triage

Sharing

General

Target

a33a350f308d8947fa9c8fc9bf9567f4
Size

255KB
MD5

a33a350f308d8947fa9c8fc9bf9567f4
SHA1

c3f2b0d6e7e394befe177ac9d0aee5c59d7f4f05
SHA256

9bc04decd66d4fbe3d316c7984bb3ccb7b784283014dfe36235efaac13ad9fc7
SHA512

07e039c062000e50f4d9662b7617af2cc4e5c4979b58219fda7cd0a871d4e9cfebf328c48f69dd4b089ae70664ba39b99f6b06a9c551df34c9ef5581b8160ac7
SSDEEP

6144:e/jyywaV4meKBMgiehW00g4KjsZPyO/2PeKwoCyO1P2+Mau:8jMajedgiWz0gFO/VBTfHu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a33a350f308d8947fa9c8fc9bf9567f4

Files

a33a350f308d8947fa9c8fc9bf9567f4
.exe windows:4 windows x86 arch:x86

0767559f4da070469ff0689f61ccf335

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
RtlUnwind
CreateSemaphoreW
CompareFileTime
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

DispGetIDsOfNames
OleLoadPicture
OACreateTypeLib2
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA

ole32

CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree

shlwapi

PathFindExtensionA

Sections

.text
Size: 142KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ