2dd14fa6b3c74de0a22e84d48671b8ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dd14fa6b3c74de0a22e84d48671b8ca
Size

64KB
MD5

2dd14fa6b3c74de0a22e84d48671b8ca
SHA1

472cbc8d4c4e77252964c31d8507a9f27fb8da9c
SHA256

7a9a635311592a46a353dedcdf48ca53069a3fe203e476bbd3953abe56daaa25
SHA512

40c82370aac4cb01bc877a36fd7b878c4f61c68817e5435daa0d78ede241cf0310d0df62f7d1900c3ef8244281f2d49e53502f406f4f2fb3f7299914f6e0a153
SSDEEP

768:K9Sh3fUHlL3cBtaThfpk18TuYYYsYuYsYuYcYzYqnL:K9Eg3IEppkiiYYYsYuYsYuYcYzY0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dd14fa6b3c74de0a22e84d48671b8ca

Files

2dd14fa6b3c74de0a22e84d48671b8ca
.exe windows:4 windows x86 arch:x86

c0a3f3ce041c64463e5d81eb5a553fb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
SetFilePointer
WriteFile
GetTempPathA
WinExec
CloseHandle
GetWindowsDirectoryA
CreateFileA
TerminateProcess
ExitProcess
GetCurrentProcess

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ