2cd928cc5cbdc81009a36dddfc738b59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cd928cc5cbdc81009a36dddfc738b59
Size

112KB
MD5

2cd928cc5cbdc81009a36dddfc738b59
SHA1

686e45c98668fd08836a150bfc0f19134c8e8198
SHA256

34eac46de3862fd455a26da5a2305e0dfa227276ea8f4e9d2f3b0693c30ecb7c
SHA512

0a70fa4102fb82426d9f954c75536cbd91473b9bbbedc400da441b4699651766414203d762601ab1ec058cf418c19e0879ba95cc012da742c97b0e32ff79313e
SSDEEP

1536:vA+drjH7LEVWbuoQ0rK+OC1G80CNA5dDthWeMZ+VnGZxNVu8gF2Qg1f5NpgVzG:vhbLXnOC480Cwtth/GZBQWf5rgh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd928cc5cbdc81009a36dddfc738b59

Files

2cd928cc5cbdc81009a36dddfc738b59
.exe windows:5 windows x86 arch:x86

f7132bc713db86a0e75cb2f61f573512

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GlobalFindAtomW
Sleep
ExitProcess

winmm

timeSetEvent

comctl32

InitCommonControls

Sections

.text
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ