2c1ef0471cf011f612886b2f7bcce95d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c1ef0471cf011f612886b2f7bcce95d
Size

37KB
MD5

2c1ef0471cf011f612886b2f7bcce95d
SHA1

0ef2951c686bb499335f9b25331344833825a2b8
SHA256

7ddc689ec3a71a3877bd7814c6f1ddd22ab8b344aa432e09e913eaf0711652d6
SHA512

f36d00e17ef188bfb5385274ece73b4879096522512ecdfc14d592c080c925eb334a3439f4aec8d826be95c67924bf827b1d93220fbb43b37ac9166ba69e436f
SSDEEP

768:Z3UyNkZ7fL4ZLK66+XzfMP+KPoPZQbJ77njIhpXT2pgxd:1gfLEK2jy+IoBQpkhdiq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c1ef0471cf011f612886b2f7bcce95d

Files

2c1ef0471cf011f612886b2f7bcce95d
.exe windows:1 windows x86 arch:x86

b5cd6dca03ead9dc3b497a56068404ab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
GetVersion
lstrcatA
GetSystemTime
FileTimeToDosDateTime
WaitForMultipleObjects
GetFileTime
LocalFree
CompareStringA
GetProcessHeap
GetACP
lstrlenW
ExpandEnvironmentStringsW
GetDateFormatA
VirtualAlloc
GetCurrentDirectoryW
SetCurrentDirectoryW
Beep
CreateMutexW
CreateEventA

user32

LoadCursorA
GetMenuItemInfoA
EnumChildWindows
DefWindowProcW
CreateWindowExA
DialogBoxParamA
GetClassNameA
MonitorFromWindow
SetWindowPos
WaitMessage
RegisterWindowMessageW
CreateWindowExW
IsWindow
SetCursorPos
AppendMenuW
DestroyIcon

gdi32

SelectObject
GetObjectA
GetBitmapBits

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ