2d2cf3e1fdfd00a08b35dc3cf0985fc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d2cf3e1fdfd00a08b35dc3cf0985fc3
Size

75KB
MD5

2d2cf3e1fdfd00a08b35dc3cf0985fc3
SHA1

f69a18a079c4f780f676c886fbfeda0d3d806b88
SHA256

08b893f64dcb2e141e8656fd3917bc37c35b5419662b39b5007b85c9d80c39a9
SHA512

5f6c132b30bc69ec7222c2d3ebe661509d27fbac100ea6ac6c5a7ece4c1c4dcf13c2c4e0b009dccaa907d068d1c94796eafa407e325e94b23f4821b6166acbdb
SSDEEP

1536:5t4mSNQdOEy9shMH4VIN9eB2w/qX5s5sU8N0t5oe/4tnJOqR:5tgvopVW9eBH/qps5sUx4hwqR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d2cf3e1fdfd00a08b35dc3cf0985fc3

Files

2d2cf3e1fdfd00a08b35dc3cf0985fc3
.exe windows:4 windows x86 arch:x86

ce27bc0417ede63d1c1db5d7f2c91f8b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetDateFormatA
IsValidLanguageGroup
LocalReAlloc
FreeLibraryAndExitThread
GetProcessAffinityMask
WriteProfileStringA
GetProfileIntA
SetTermsrvAppInstallMode
_hread
FreeResource
SetConsoleLocalEUDC

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE