c4335c17806d35b35b65dce5673f37d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4335c17806d35b35b65dce5673f37d6
Size

26KB
MD5

c4335c17806d35b35b65dce5673f37d6
SHA1

2f4bce331b72004e07a1aa00c7108104b8d52795
SHA256

ddd89c04cf3330868077d9964f7d873c3525f644c79621f0126211dfeaba262b
SHA512

3c0ebb89770fc768cdd944ec025b30f67dbea829d61c5d2b6bab1d80dd95c202629326c29005473039efe9568d59ccb34fe2b886c70cb902b108e6c98fec6b20
SSDEEP

384:tzc34tV2a7X2+wmq3DyptcIDgmtVsONRcO9MVhl4OcUZ/rB6/9of6NQ:tzc34P7GDmIGtc2gORTieCv6/9qH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4335c17806d35b35b65dce5673f37d6

Files

c4335c17806d35b35b65dce5673f37d6
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE