2d6aa2eef677c8958fd87f5a4063c569

General

Target

2d6aa2eef677c8958fd87f5a4063c569
Size

30KB
MD5

2d6aa2eef677c8958fd87f5a4063c569
SHA1

a528a69b49de903f419db382d0a2ea51e2946b6f
SHA256

dd2d5edeb5fec94b1a01dbb3a0e7da33b2f503996bff05ec2d2cfa8e9626de57
SHA512

1437df16a6c3112628321960efef46ba68aa480588afca0ed3fe73f43f0a7787e0e10fc9ad2c94eab1ed1e107f06bd68b66f57106e1405d214d3f9e867b6959f
SSDEEP

384:HpxnDepYkCMSvFiZL2L5kkyghttAW8pVf19KzWzR9NG1KDrWTi:3nsHS0g5kkygDsVf196WbUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d6aa2eef677c8958fd87f5a4063c569

Files

2d6aa2eef677c8958fd87f5a4063c569
.exe windows:4 windows x86 arch:x86

8234ffa1c6f923cf35524f4e06333a2a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
GetACP
DeleteCriticalSection
GetStdHandle
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
lstrcpyA
GetOEMCP
SetHandleCount
GetFileType
SetStdHandle
SetFilePointer
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
HeapFree
HeapAlloc
VirtualAlloc
FlushFileBuffers
CloseHandle

user32

wsprintfA

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8234ffa1c6f923cf35524f4e06333a2a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 5KB - Virtual size: 9KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 5KB - Virtual size: 9KB

.rsrc
Size: 6KB - Virtual size: 5KB