2d18dc3d31b274be2fb7eefaae23e879 | Triage

Sharing

General

Target

2d18dc3d31b274be2fb7eefaae23e879
Size

521KB
MD5

2d18dc3d31b274be2fb7eefaae23e879
SHA1

ea9d211acf77a729a8c7509d37cd40ea281fd514
SHA256

d47e7a740f022f2cc867eb8f829f85a19b473046bf4aab64b9352a2cf509dfeb
SHA512

37f27ab5dc800e412b17c36a9712bc8e8c5336e42687388a026e0879a99e76f0930c18167116468f34144b5c5facb09ec43c6abb58c86609985d6a9740560e66
SSDEEP

12288:Tr3zEleVgXWa+qLrxR+kzZPsRAYB3h8rEqX5bDzpZ34fmS:TklIj2LTTzZaAYBhqXF4f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d18dc3d31b274be2fb7eefaae23e879

Files

2d18dc3d31b274be2fb7eefaae23e879
.exe windows:1 windows x86 arch:x86

d0025d7348314f83005e5d39fb16013a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CreateWindowExA
DestroyWindow
DrawTextA
GetClassInfoA
GetClassInfoExA
GetMessageExtraInfo
GetPropA
GrayStringA
IsChild
IsWindowEnabled
PostMessageA

kernel32

AddAtomA
CreateFileA
EnumSystemLanguageGroupsA
FreeLibrary
GetFileSize
GetFullPathNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
WriteFile

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 21KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE