2d9548e36dca47b19175719d8696ccd5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d9548e36dca47b19175719d8696ccd5
Size

11KB
MD5

2d9548e36dca47b19175719d8696ccd5
SHA1

237fab0da1f3370dacc501685ea87777cbde9dfa
SHA256

c63602d7bbf1025502b656181c38d1c6821b736ae16cc0a2ffeb8c7fa8655fd6
SHA512

e83a5a4952f7d0fd2a8628a378246c763b29cfec285d6e61edb78f3b6f6ce7a3fb998e8c5b9ecb083e399089b8b2b7856331271d5ccb3b06764c09f0726d9a20
SSDEEP

192:pvY59Ag88LgOLyXNpV4c7z8fVulTG4ifVOyh9fCSGXrPp3gMM1waXLg:pAAHCyXNpV4O0VulTGDVOO9aS0rJgGn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d9548e36dca47b19175719d8696ccd5

Files

2d9548e36dca47b19175719d8696ccd5
.exe windows:4 windows x86 arch:x86

656bc56a160a1c53e555b836cd7defb1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetACP
FileTimeToSystemTime
SetConsoleCP
SetStdHandle
CloseHandle
LoadResource
ExitProcess
WriteConsoleA
IsDebuggerPresent
GetSystemInfo
GetCurrentThreadId
GetThreadLocale
LoadLibraryW
GetUserDefaultLCID
lstrcmpW
FormatMessageW
RtlUnwind
HeapAlloc
SetLastError
GetModuleHandleA
UnmapViewOfFile
GetOEMCP
LocalAlloc
ReleaseSemaphore
VirtualProtect
GetTickCount
GetStartupInfoA

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey

user32

InflateRect
GetParent

msvcrt

_exit
??0exception@@QAE@ABV0@@Z
__dllonexit
_onexit
_callnewh

lz32

LZClose

ole32

CoCancelCall

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ