2dba61c37029d34e85a82893cd740e0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dba61c37029d34e85a82893cd740e0e
Size

87KB
MD5

2dba61c37029d34e85a82893cd740e0e
SHA1

c90edba40a101af1a35812a9beced56250b7fd20
SHA256

529f49500fa9ca71650a5f6199e03368a5b0318fc39df3d853a6b1b011ced122
SHA512

3b1716a4f7e3457bcf74590779f9642c43e3c6171c0b3b4c4e58ee0b95caa6a0c8610c8cb3627a80c9d379101ebfb91503566729623409380936642eaca93d8e
SSDEEP

1536:JzhmYuYbfpXmCixfeFgm/GkqDvv2qPUQ3GKf8LB0pAD5BxhlzRZaJ6fd9c:yYld0/m/G7xP5GI8L7D5BvfZa8fdW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dba61c37029d34e85a82893cd740e0e

Files

2dba61c37029d34e85a82893cd740e0e
.exe windows:4 windows x86 arch:x86

17e22548e05f59da75b044df5a45fc60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCommandLineA
GetTimeFormatA
ExitProcess
SetConsoleCursorPosition
Heap32ListFirst
GetLastError

advapi32

RegOpenCurrentUser

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

mqfdumsq
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impsec
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ