2048988f82039c3f31dc015ebfc03e6e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2048988f82039c3f31dc015ebfc03e6e
Size

57KB
MD5

2048988f82039c3f31dc015ebfc03e6e
SHA1

68131b6872389f3dcd5ebc9726aef873136f2b1f
SHA256

22dfa7662c58cec3986542b5ffc54eaf6bf24c05335cb7d638d9d9b12141dcfb
SHA512

5a56b371299d2dbb203d93d7fca4d3f6dd903637988a5560dfbb1e7ed6237fa8d775d60eefd159ebd2ee024af5b3a537950fd1dcf28eb72b15744c3e62d18b9e
SSDEEP

1536:OsjjvXN4mz/je5Ju6/Ju6La6t35LOaGqRMqr/4GT7s3p:OsH/3iHBPLOaNRr/4GTw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2048988f82039c3f31dc015ebfc03e6e

Files

2048988f82039c3f31dc015ebfc03e6e
.exe windows:1 windows x86 arch:x86

c1091fa7f882f5c31553735784761fd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_getch
_iob
_itoa
__GetMainArgs
_stricmp
_strnicmp
toupper
abort
exit
ferror
fgetc
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
raise
signal
strcat
strchr
strcmp
strncmp
strtol
ungetc
wcslen
wctomb

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 664B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 948B - Virtual size: 948B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE