2ab7aa548095071f137fca100a36ce3c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ab7aa548095071f137fca100a36ce3c
Size

5KB
MD5

2ab7aa548095071f137fca100a36ce3c
SHA1

456d0075a1119eb5aad04b3b2427ff3e9583438a
SHA256

e1a5137a7fa07fac097890cc933b57373683f20ffe092ff4eb2d6b54e7399332
SHA512

5b7586ed389888290fb8b60d94119698c02527da187b35ac1d0a620879af2dd34d4b3f4f14dce7bb56d150e4f6cb2f93806fa6faec1a41b5c7491ea32275ac99
SSDEEP

96:dgcMmQw5kJm3umF7ErUn3Vum2OhjcCdXx56yYu:dg7IvumF7EGFuhYcCop

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ab7aa548095071f137fca100a36ce3c

Files

2ab7aa548095071f137fca100a36ce3c
.exe windows:4 windows x86 arch:x86

fc13980c0527867d0f368838d760c82e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetComputerNameA
GetPrivateProfileStringA
GetProcAddress
GlobalFree
LoadLibraryA
RtlMoveMemory
RtlZeroMemory
lstrlenA
ExitProcess
FindFirstFileA
CloseHandle
CreateFileA
GetFileSize
GlobalAlloc
ReadFile
FlushFileBuffers
WriteFile
FindClose
DeleteFileA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation

wininet

FtpPutFileA
InternetConnectA
InternetOpenA
FtpCreateDirectoryA
InternetCloseHandle
FtpSetCurrentDirectoryA

advapi32

GetUserNameA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE