2d9636a953a3d3032929bd78b3957db5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d9636a953a3d3032929bd78b3957db5
Size

344KB
MD5

2d9636a953a3d3032929bd78b3957db5
SHA1

2ca687bc5abee5227384ffe2797f9b1f19a87204
SHA256

56f89fbe009b1355d60a48d0db4184805afe8d20c9d621e140726a9e15dee5ff
SHA512

db2c2cdcc08fb3827f9fb6d19804aeb873ebac290d1e8f1efeeb4dd716f1989c3a0d875a890b497480b10c190f6ebdb1c42d6b46c6ad43a5b8266c9d3b894967
SSDEEP

6144:VRZ8Ft7y4lHZd5MJ2cLElcgwGKh4UbfhK0RQ0MlvAMMu9TXP1Q:toeKzhcLacgP+4UbfhFRQ0MyMV9TK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d9636a953a3d3032929bd78b3957db5

Files

2d9636a953a3d3032929bd78b3957db5
.exe windows:4 windows x86 arch:x86

825fd660d3967b107d37d45acee32501

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

gdi32

SaveDC

comctl32

ImageList_Add

shell32

ShellExecuteA

wininet

InternetOpenA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 331KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ