bb35fa7358ecd68ae41917c0314602a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb35fa7358ecd68ae41917c0314602a7
Size

112KB
MD5

bb35fa7358ecd68ae41917c0314602a7
SHA1

d7cd0bbc369758ea47dacbddf713253768e291fb
SHA256

86103820f6cbe8ad7937b915a3c307f851a92e3ce6824c9469f129ab1646626a
SHA512

0796fba1c0f6233f251d4dfe4525d33579b53774afa997b4976ab9a07bcd1de125d68bb583b40ab2faf00a45d22acb2c9308e302baa82ba58eab08e0bface5af
SSDEEP

3072:lxyG6M3EwddrL/b6V+nDwt7DtJaRnKxN/qmA:pF/O6QD0nKW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb35fa7358ecd68ae41917c0314602a7

Files

bb35fa7358ecd68ae41917c0314602a7
.exe windows:4 windows x86 arch:x86

8e621bad85b0cf9bbe5a405b7186505a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
CopyFileA
QueryPerformanceCounter
lstrcmpA
VirtualAlloc
GlobalFindAtomA
RemoveDirectoryA
GetCommandLineA
GetModuleHandleA
GetSystemTime
VirtualFree
lstrlenW
GetWindowsDirectoryA
RemoveDirectoryW
DeleteFileA
FindClose
lstrcmpiA

user32

TranslateMessage
GetDC
GetSystemMetrics
CharNextA
GetParent
GetDesktopWindow

gdi32

GetStockObject
LineTo
CreateFontIndirectA
SelectPalette
CreateCompatibleDC
DeleteDC
GetTextMetricsA
GetObjectA
RestoreDC
SetTextAlign
GetClipBox
CreateSolidBrush
GetDeviceCaps
SetStretchBltMode
SaveDC
DeleteObject
CreatePalette
RectVisible
GetPixel
SetTextColor
SetMapMode
SelectObject

glu32

gluNurbsCallback

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ