2812a4b7e81bc2ba0555ff4cfa84ddc775be39442aeec4a29dc290e86a2e10b3 | Triage

Sharing

General

Target

2812a4b7e81bc2ba0555ff4cfa84ddc775be39442aeec4a29dc290e86a2e10b3
Size

319KB
MD5

ae7477c5b872a937fba9ef2f6bd19ea7
SHA1

a7fbd533846d3d53d01a6c3f015e0ec9700c125a
SHA256

2812a4b7e81bc2ba0555ff4cfa84ddc775be39442aeec4a29dc290e86a2e10b3
SHA512

110b0a870f7cad301cb109ff07370fa8583a44e98c677cc543d1196bce3cf0a66413e7e3fa18e821306365f7ee47d5cc8e3a201b55bfa5dc620600a032f3773c
SSDEEP

6144:w5ToI5YKQsXAO8n0EJvrUd21GasJ6HSUMstLoTFu:7IAUAO8pJSNtJPvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2812a4b7e81bc2ba0555ff4cfa84ddc775be39442aeec4a29dc290e86a2e10b3

Files

2812a4b7e81bc2ba0555ff4cfa84ddc775be39442aeec4a29dc290e86a2e10b3
.exe windows:4 windows x86

e8214ec4d875543ea846e1fb0b205c0f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleOutputW
PrepareTape
CloseHandle
GlobalAddAtomW
WriteConsoleOutputCharacterW
GetCurrentDirectoryA
SetConsoleCtrlHandler
ReadProcessMemory
lstrlenA
CreateTapePartition
EnumLanguageGroupLocalesA

user32

WindowFromPoint

msvcrt

memcpy
printf
fclose

clusapi

ClusterNetworkEnum

pdh

PdhEnumMachinesA

shell32

DragQueryFileA
SHInvokePrinterCommandW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.7ZD.RBW
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

:
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

t
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ