2ab8c29cf9516722ca51eafd34772390 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ab8c29cf9516722ca51eafd34772390
Size

64KB
MD5

2ab8c29cf9516722ca51eafd34772390
SHA1

e6780db8bf05bfad949c15a3c65f799087d6c099
SHA256

deeb91e8e3f70d2a524cf6c0f346ff932cd2d990dce676bd3c921f6cf24fa535
SHA512

dd3a9286563acd0155b54db89ba6a63350f837b01d0596fb60a8539e92a834659a833a71613ac6b9da01c35f3344a3b4efb39894d9db6747738c38bb06587188
SSDEEP

768:6JV5lX1RPqT73DKilFV+0Ha1AkPF/dMRPEp8YRVMhM1rEjW9jAKEsDXmEPHw4CcM:6n5p27zLzv61ZlN8W8MWS9kqzvMcLA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ab8c29cf9516722ca51eafd34772390

Files

2ab8c29cf9516722ca51eafd34772390
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ