2ca948427d26c206a9f38ff16224e47b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ca948427d26c206a9f38ff16224e47b
Size

27KB
MD5

2ca948427d26c206a9f38ff16224e47b
SHA1

adf168d93c16c861db9aea340ce022bfebbbdf15
SHA256

74e4230c3eeca5fbc7666c11c0cf6982ef1c7a175e0cffb5c2e53e136272ac55
SHA512

db263d515d0bcb90cc3cd4cc03e28046e8741ae7cc2e77f6635de2909986407c2a9190c448dd6ab9fc7b4326e4667d004b1d76c85daa9e9e492a2ecff47e7220
SSDEEP

768:9h2TvvQhRjbacva8F8SWfnGfS/XIMXIsXIU/XIy:9ALQ/PachG/G6QRxUQy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ca948427d26c206a9f38ff16224e47b

Files

2ca948427d26c206a9f38ff16224e47b
.dll windows:4 windows x86 arch:x86

3f167a2b51bb2d34cdeb753949bb79bc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

CreateThread
Sleep
MoveFileExA
GetModuleFileNameA

wininet

InternetOpenUrlA
InternetCloseHandle
InternetOpenA

Exports

Exports

f

Sections

.text
Size: 702B - Virtual size: 702B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ