2f96741fe67935d4d8c49908cc6a3316 | Triage

Sharing

General

Target

2f96741fe67935d4d8c49908cc6a3316
Size

128KB
MD5

2f96741fe67935d4d8c49908cc6a3316
SHA1

25376b35ef41c70561b9419740a652f05985bad8
SHA256

c3e034ad712fe91e5d2a5990563fa39eae608d8150368b8d9447044632c2d0da
SHA512

483b3b5d6ae1f26df287abf9d224072827cfe8f55d5aa4f777b10446c6fcb9ea5955c8cc8e30e13e028a661ed5defa6f69e5de7ff1071f4c0c6767f93889c2e5
SSDEEP

3072:nuJjs9lALIZjk9lS4JMIE+CnQ8HT6PVEsyuf6CS4JMIE+CnQ:ojsrUMjqXb8HWP+uf64b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f96741fe67935d4d8c49908cc6a3316

Files

2f96741fe67935d4d8c49908cc6a3316
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ