2b555a64be0493a724046b4971ce63e3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b555a64be0493a724046b4971ce63e3
Size

55KB
MD5

2b555a64be0493a724046b4971ce63e3
SHA1

e2563ada7fea9f3bb90216c95b545088076eb549
SHA256

20a78da533a4c098136f0a0b5354771f07e6591904e36163052b04f72352745d
SHA512

0edcf422229c1e37372d58f3fb3976050ba439b7a4465cbbe3207fb41713b55b9cdc94054545242e62c75246267a6e8f68d9b19a29c6e6249aa0ec3810cf0b90
SSDEEP

768:AdmNpy0T9u6nIK5NtcCF8pyyGBN/jgrkbhpaf/zukAfTGD7a4gqmt9x:imt86nIK5cCF8EbjLpaXikASD7JVS9x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b555a64be0493a724046b4971ce63e3

Files

2b555a64be0493a724046b4971ce63e3
.exe windows:4 windows x86 arch:x86

dcda4f737d67f52704d48cdfee25379c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
lstrlenA
GetTickCount

gdi32

GetBkColor
SetBkMode
GetTextMetricsA
GetTextExtentPoint32A
GetStockObject
ExtTextOutA
LineTo
GetDeviceCaps
CreateFontIndirectA
SetPixel
DeleteObject
GetObjectA
SelectObject
SetROP2
CreateCompatibleDC

user32

GetSysColor
GetMessageA
ShowWindow
LoadIconA
SetFocus
GetClientRect
DestroyWindow
PostQuitMessage

msvcrt

_c_exit
__setusermatherr
toupper
wcschr
_adjust_fdiv
memmove
__CxxFrameHandler
_XcptFilter
wcstoul
__set_app_type
exit
rand
_acmdln
__p__fmode
__getmainargs
_controlfp
_except_handler3

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ