2d255fe127b12aea60d8c5d45caa79b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d255fe127b12aea60d8c5d45caa79b7
Size

59KB
MD5

2d255fe127b12aea60d8c5d45caa79b7
SHA1

d18512c32c88a4842e11f2c4818a2793707f1691
SHA256

37f0d3934c74d884a2560a6736524b2a0a18492b5cfea3fd5af1b31dd9b72fff
SHA512

37b479ee90ece287cde6572992e212389dd9772638e4b6e173520818193561e6a830bbd16a6ccfb1a995f90d3dd54abe56a563898fd47bb2dd91334671890593
SSDEEP

768:tg5ip3fgEJYPfiEMGM8AnrPALo7rNaIHsePf/1nZpZ7QeHX1bEYMQHAN:tg5i94YwKRGrAnrDaIMePf9nZgMBC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d255fe127b12aea60d8c5d45caa79b7

Files

2d255fe127b12aea60d8c5d45caa79b7
.exe windows:4 windows x86 arch:x86

6b53abb1eed856d3c3611e2cb213ac1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindAtomA
GetCurrentThreadId
GetDriveTypeA
GetFileTime
InitializeCriticalSection
TlsGetValue
CreateEventW
ReleaseMutex
GetCurrentProcessId
lstrlenW
HeapCreate
GlobalFlags
LocalFree
GetPrivateProfileStringA
IsBadStringPtrW
ReleaseMutex
LoadLibraryW
GetEnvironmentVariableW
WriteFile
FindClose

user32

IsWindow
EndDialog
CreateWindowExA
DrawStateW
GetClientRect
GetClassInfoA
DrawTextA
SetFocus
CallWindowProcW
DispatchMessageA
GetSysColor
GetSysColor
GetKeyboardType

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

clbcatq

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE