2bd01af687fd2ef3cce723fffe1dee58

General

Target

2bd01af687fd2ef3cce723fffe1dee58
Size

115KB
MD5

2bd01af687fd2ef3cce723fffe1dee58
SHA1

af60bf73acbaf4b5f0b15848eea175cf6ac1610a
SHA256

e2b23cf7aca7d324a9b986756f502b40c00db6a64bc9487cad2af2021f21277a
SHA512

d085a0904b35aeb7a0196e1f4b8ae3cf6d95baec042a35bf40d10be7e2633c4951529ee59407fdf5655469cbb4338de017be8365f497738cffdc0dc71db44536
SSDEEP

3072:RhiHcNdjLUZC9lrwhKCzYFhq12soGe6HpSPD8mxC7:8ejLaC9lsMvqM3Ge6I7I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bd01af687fd2ef3cce723fffe1dee58

Files

2bd01af687fd2ef3cce723fffe1dee58
.exe windows:4 windows x86 arch:x86

c9b830c3f615771c7a7e8e55b9e93696

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDesktopWindow
GetDC
CharNextA
TranslateMessage
GetParent
GetSystemMetrics

kernel32

lstrcmpA
lstrlenA
MulDiv
GetThreadLocale
SetCurrentDirectoryA
QueryPerformanceCounter
lstrlenW
GetCurrentProcessId
GetProcessHeap
GetUserDefaultLangID
GetCurrentThread
GetCurrentThreadId
lstrcmpiA
GetStartupInfoA
GetCommandLineW
GetConsoleOutputCP
DeleteFileW
GetTickCount
GetModuleHandleW
VirtualAlloc
VirtualFree
GetACP
GetVersion
GlobalFindAtomA
GlobalFindAtomW
GetCommandLineA
RemoveDirectoryA
GetCurrentProcess
GetDriveTypeA
GetWindowsDirectoryA
DeleteFileA
IsDebuggerPresent
lstrcmpiW
CopyFileA
RemoveDirectoryW
GetOEMCP
GetModuleHandleA
ExitProcess

gdi32

GetPixel
CreateFontIndirectA
GetDeviceCaps
SetStretchBltMode
DeleteObject
GetTextMetricsA
SetTextColor
SetMapMode
RectVisible
PatBlt
RestoreDC
SetTextAlign
CreatePen
GetStockObject
CreatePalette
GetClipBox
CreateSolidBrush
GetObjectA
DeleteDC
SelectObject
LineTo
SaveDC
CreateCompatibleDC
GetNearestPaletteIndex

glu32

gluQuadricCallback

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c9b830c3f615771c7a7e8e55b9e93696

Headers

File Characteristics

Imports

user32

kernel32

gdi32

glu32

Sections

.text Size: 19KB - Virtual size: 19KB

.data Size: 56KB - Virtual size: 56KB

.rsrc Size: 38KB - Virtual size: 41KB

.text
Size: 19KB - Virtual size: 19KB

.data
Size: 56KB - Virtual size: 56KB

.rsrc
Size: 38KB - Virtual size: 41KB