2bed247085638b2fdc07f8559a5f72aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bed247085638b2fdc07f8559a5f72aa
Size

99KB
MD5

2bed247085638b2fdc07f8559a5f72aa
SHA1

f64226886c3839cebcd02f9c1185fd4e8245d452
SHA256

f01e6c62231fe67ce0c0c9b691ec02204f0181d514492f5868f4c782b48e33d0
SHA512

57af81759ba7864e39bd40f555547d9ae5773d44aeaee1fcfd3443231ca54c78cb9bc41a76d78577d8209b14dde176a6eec09d4b9bc268d934f9bc6544333e25
SSDEEP

3072:7PbrzIlgz9QmMjH02ASBP0/dYJvaMsRO9BZ:7PPUgz9+rjASBcdYdcOJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bed247085638b2fdc07f8559a5f72aa

Files

2bed247085638b2fdc07f8559a5f72aa
.exe windows:4 windows x86 arch:x86

ab9d342bed2c2ac19a7ca6fe9b1835e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
CompareStringA
GetDiskFreeSpaceA
ExitProcess
GetLocaleInfoA
GetDateFormatA
GetCurrentProcessId
lstrlenA
MoveFileA
SizeofResource
VirtualAlloc
FindFirstFileA
GetProcAddress
lstrcmpA
GetVersionExA
GetCommandLineA
HeapAlloc
GetModuleHandleA
GetOEMCP
VirtualAllocEx
CreateFileA

user32

RemovePropA
IsWindowEnabled
AdjustWindowRectEx
GetCursor
CreateWindowExA
SetFocus
SetParent
TranslateMessage
GetKeyState

shell32

SHGetSpecialFolderLocation
SHGetFileInfoA
Shell_NotifyIconA

gdi32

GetClipBox
GetCurrentPositionEx

version

GetFileVersionInfoSizeA
VerInstallFileA
GetFileVersionInfoA

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ