c35eefdd2189d03b31b89551303e8259b2db1c8b87b9b07e5114dd1a9530f2e7 | Triage

Sharing

General

Target

c35eefdd2189d03b31b89551303e8259b2db1c8b87b9b07e5114dd1a9530f2e7
Size

37KB
MD5

9f87872525247b266e44b6d9e06c56e3
SHA1

7dcdb77dc29ac398957a195dd0da0b494ab7921e
SHA256

c35eefdd2189d03b31b89551303e8259b2db1c8b87b9b07e5114dd1a9530f2e7
SHA512

e74ba07029ab0cd71c3efed46ff3264b7d5d4e6d4799f466f4846094a40b668c3d2a4ef6a28a93a6cf03f14a3e988f8a1ecb19ec430c6b2effc5c1fbeec7ba59
SSDEEP

768:OqJm2quEbDkCAZM+pzgs3kG2IBsOhukX/Hiz4I8FsKWkV:HhdC+asR2IBsUaz4IJKJV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c35eefdd2189d03b31b89551303e8259b2db1c8b87b9b07e5114dd1a9530f2e7

Files

c35eefdd2189d03b31b89551303e8259b2db1c8b87b9b07e5114dd1a9530f2e7
.exe windows:5 windows x86 arch:x86

9ed54609127a70e312733e0fe986dabe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

hh.pdb

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoA
GetTickCount
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcpyA
GetCurrentThreadId

user32

wsprintfA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE