c38ed38d2cae21de0baf7ffd8056b2bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c38ed38d2cae21de0baf7ffd8056b2bf
Size

164KB
MD5

c38ed38d2cae21de0baf7ffd8056b2bf
SHA1

a151233bc0d080cb6b42a25b1991d460cdbd87be
SHA256

3ec67062061e343bc4cfb64147e72b937912cc89b1a1b8a710f62d9a8d0994c0
SHA512

79489a6aab9560de5d0c5d1b4f0e8a579db9bcf24a82e9809d09d9e537ff82af397263c37f9392dca26cc548942d0971492a79d2b97ef111290277962c064d78
SSDEEP

3072:YY27p15jEyQ0oUtNSAAm1A99Y+YprGu9oz3qJZfCgEZZXAag:YYcjEmoyVZc7Yprroz6LdEvXAag

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c38ed38d2cae21de0baf7ffd8056b2bf

Files

c38ed38d2cae21de0baf7ffd8056b2bf
.exe windows:4 windows x86 arch:x86

5fa083736ded963d39ed6251dd3ec7d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoGetMalloc
CoSetProxyBlanket
CoInitializeSecurity
CoCreateInstance
CoInitializeEx
CoUninitialize
CoQueryProxyBlanket
CoTaskMemFree
StringFromGUID2

user32

IsWindow
GetDlgItem
CreateWindowExW
DestroyWindow
EnumChildWindows
SendMessageA
GetWindowThreadProcessId

kernel32

GetOEMCP
GetCalendarInfoW
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
GetACP
HeapSize
VirtualAlloc
IsValidCodePage
HeapReAlloc
EnumResourceNamesA
RaiseException
ExitProcess
VirtualFree
SetEndOfFile
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
SetFilePointer
InitializeCriticalSection
HeapCreate
ReadFile
GetCPInfo
GetStartupInfoA
SetEnvironmentVariableA

rpcrt4

UuidCreate

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 66KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ