2e01ccb96dc8662daf6ca710c76e37bbdc7999a28c3ba1f67584807ddc516eae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e01ccb96dc8662daf6ca710c76e37bbdc7999a28c3ba1f67584807ddc516eae
Size

41KB
MD5

0c306be804b20cd0b8b6214c1f02cb89
SHA1

1b4ec7d4d7732adf3dcbc8d64a6ce679f62d1246
SHA256

2e01ccb96dc8662daf6ca710c76e37bbdc7999a28c3ba1f67584807ddc516eae
SHA512

f855843e7581b3263816f946cf79cb7a6e9299c035dfa63be3ef025cde0901041f8694a392ba00529835b38a5a19964674449cb9591ec1affb4082af57a9f2d4
SSDEEP

768:eZRa6X7Zon0QGkYSjxcSUbH57LG/7JANir0/SXn+x9uIClYzJ71zkzzEWdfhzZE7:6zZon0P8jxYzoCNir0asdF1QzoWFby

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e01ccb96dc8662daf6ca710c76e37bbdc7999a28c3ba1f67584807ddc516eae

Files

2e01ccb96dc8662daf6ca710c76e37bbdc7999a28c3ba1f67584807ddc516eae
.exe windows x86

b55f776e57c6a6e791d3ddbe3178ef57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadLibraryA
FreeLibrary
lstrcatA
lstrlenA
ExitProcess
VirtualAlloc
GetProcAddress

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 530B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ