2c5fe288c280c2ee436b8455e07552c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c5fe288c280c2ee436b8455e07552c0
Size

129KB
MD5

2c5fe288c280c2ee436b8455e07552c0
SHA1

bd6bfe9ea6ac6582dbac1005f98ff87c5656df67
SHA256

f10c908c9d5bee8b65a984d6912527da25c8b01be538154e6678afaaa2ce35d9
SHA512

f53ea4cd5990aca5d47f30ed948014805e333c047e03f73e368444dd3fc090df00d77f6aee5970513dc9aa9ce360fc4dd75231c6b47978ae36ec20e9ba398f2e
SSDEEP

3072:fKTEOHxUvucOepNXocVgY3Yogn2zXotN/R:f4vHINXoCgiXoX/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c5fe288c280c2ee436b8455e07552c0

Files

2c5fe288c280c2ee436b8455e07552c0
.exe windows:4 windows x86 arch:x86

0ab4e1d45692ac92ce459c79cd1688a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
SetLastError
FreeConsole
TlsGetValue
GetCommandLineA
EnumResourceTypesA
FindClose
GetLastError
LocalFree
Sleep
PulseEvent
VirtualProtect
GetDriveTypeW
LoadLibraryExW
GetModuleHandleA
IsBadReadPtr
IsBadCodePtr
GetDiskFreeSpaceExA
GetDateFormatA
DeleteCriticalSection

advapi32

IsValidSid
GetFileSecurityA
OpenEventLogA
FreeSid
AccessCheck
RegCloseKey
LsaFreeMemory
CloseTrace
RegLoadKeyA
LsaClose
CloseEventLog
RegCreateKeyExA
LsaSetSecret
RegCloseKey

clbcatq

GetComputerObject
GetCatalogObject
ComPlusMigrate
DowngradeAPL
SetSetupOpen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE