2a5ca676a3eae9a835df706f0ce42eb0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2a5ca676a3eae9a835df706f0ce42eb0.exe
Size

7.6MB
MD5

2a5ca676a3eae9a835df706f0ce42eb0
SHA1

2e39867f3b6f796c37809f1b04912163c2deaa06
SHA256

26df4ee8a33de6fa27f91d773910970032aebdbcd27c5735f79392381b1d3d26
SHA512

55b4e3e7034f96018ef2c6d4d55d3a4a0719e7c25021a9d24d5606c86e404e66efc79cfbc4a1603472984368b4bcfcf779936bcbea1f425fec847e831a14dba0
SSDEEP

196608:yTsMXC58za64koH+0wfgmGmw8i+T7aghmddt+DW0aOr4KimqYXUKjMwq2GGRLixR:4BBIqqDtsUz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a5ca676a3eae9a835df706f0ce42eb0.exe

Files

2a5ca676a3eae9a835df706f0ce42eb0.exe
.exe windows:1 windows x86 arch:x86

92f24cb7d7b75e2765d6d2f64a6ee11b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
_llseek
_lclose
_lopen
GetExitCodeProcess
Sleep
GetLastError
CreateProcessA
GetVersionExA
GetModuleFileNameA
GetFileAttributesA
GetModuleHandleA
GetStartupInfoA
GetSystemDirectoryA
_lread
GetVersion
lstrcatA
RtlUnwind
UnhandledExceptionFilter
GetACP
GetOEMCP
GetCPInfo
GetStdHandle
GetFileType
VirtualFree
VirtualAlloc
lstrcpyA
GetCommandLineA
GetEnvironmentStrings
ExitProcess
CreateFileA
ReadFile
CloseHandle
DeleteFileA
WriteFile
_lwrite
MoveFileA
OpenFile
SetFilePointer
GetLocalTime
_lcreat
GetTickCount
lstrcmpiA
GetSystemTime
GetEnvironmentVariableA
CreateThread
TerminateThread
SetEvent
WaitForSingleObject
CreateEventA
LoadLibraryA
FreeLibrary
GetProcAddress
lstrlenA
GlobalFree
DeviceIoControl
GlobalAlloc

user32

wsprintfA
MessageBoxA
LoadStringA

advapi32

RegCloseKey
RegQueryValueA
RegOpenKeyA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gtide
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gidata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92f24cb7d7b75e2765d6d2f64a6ee11b

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 7KB - Virtual size: 7KB

.gtide Size: 41KB - Virtual size: 40KB

.bss Size: - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 12B

.data Size: 4KB - Virtual size: 4KB

.gdata Size: 7KB - Virtual size: 7KB

.gidata Size: 2KB - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 1014B

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 7KB - Virtual size: 7KB

.gtide
Size: 41KB - Virtual size: 40KB

.bss
Size: - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 12B

.data
Size: 4KB - Virtual size: 4KB

.gdata
Size: 7KB - Virtual size: 7KB

.gidata
Size: 2KB - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 1014B

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 2KB