2c15cd63a3f40190d51055594bac0566 | Triage

Sharing

General

Target

2c15cd63a3f40190d51055594bac0566
Size

18KB
MD5

2c15cd63a3f40190d51055594bac0566
SHA1

2212777b21c9154496fa5a66f8017f5c608dd5cc
SHA256

e0b640245c61496d84eeb9cfa04c9e1f483df0bf7de3b804df0c6847c8f87570
SHA512

9571de31a6b983fbcdc54cb0759672dc574b0aa6e4ba3b4ee177477c17bc9abe3ec1bcca63ee5e032c4b18a17c94d3f0e500e0a7ff29bedda2ce85037f62e723
SSDEEP

192:L0/4KU7z2A8z0cfDdPCH0VGDxGq13cEaUoQfXt9iaBLABZnNLRSB9CGNplQAs/z:LO4RP2AiP5Y0VKcZkUNqL2/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c15cd63a3f40190d51055594bac0566

Files

2c15cd63a3f40190d51055594bac0566
.exe windows:1 windows x86 arch:x86

560044b3ca363afbd4777fec16c5e92b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

clearerr
_ultow
_isnan
_mbsinc
_wtempnam
strftime

advapi32

GetServiceDisplayNameA
BuildSecurityDescriptorA
GetAce
QueryServiceObjectSecurity
CreatePrivateObjectSecurity
LsaLookupPrivilegeName

comctl32

ImageList_GetImageInfo
InitCommonControlsEx
ImageList_Duplicate
MenuHelp
ImageList_ReplaceIcon
ImageList_DragShowNolock
DrawStatusTextW

ntdll

iswctype
isupper
RtlQueryProcessDebugInformation
ZwSetTimer
NtDeleteKey
ZwSystemDebugControl
RtlSetUserValueHeap
RtlNumberOfClearBits

gdi32

CreateSolidBrush
CreateMetaFileW
AddFontMemResourceEx
GetCharWidth32W
GdiGetBatchLimit
EnumICMProfilesW
GetWorldTransform

Sections

.idata
Size: 9KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE