2e9d050b62845d876eeac7e43f8f91c3 | Triage

Sharing

General

Target

2e9d050b62845d876eeac7e43f8f91c3
Size

693KB
MD5

2e9d050b62845d876eeac7e43f8f91c3
SHA1

28a1d7747fb65c99e8d8438a67fcca57513f3d12
SHA256

77f7d993f9036d505f2e5910aff250334111219a02fd82bc6ed059d632f50623
SHA512

4c32fee3d7e74bf56064bc8c2f26020111da0f357a8993377a76c68a0e49098aaa31c26479cf33ce2c0a5fdac7e3c35bb3252bf44e9306bf31f771f82dde6b59
SSDEEP

12288:Jy6uXWgjm+nw/KlfialjBAP/90eMhJZSy1ht2OxGe0CnNX1V/0ChHK:J0DXnq9aVBAP/lMzZS8tJGe0CNX1V/0/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e9d050b62845d876eeac7e43f8f91c3

Files

2e9d050b62845d876eeac7e43f8f91c3
.exe windows:4 windows x86 arch:x86

e57107f3e71f1c2e1d7244fcbaac40b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetCommandLineA
GlobalAlloc
GetFileSize
LocalAlloc
GetTickCount
CreateEventA
GetVersionExA
GetLastError
GlobalFree
lstrcatA
GetModuleHandleA
CloseHandle

msvcrt

_acmdln
_controlfp
_exit
rand
__getmainargs
_c_exit
__p__commode
__p__fmode
wcslen
__CxxFrameHandler
wcstoul
__setusermatherr
_initterm
_adjust_fdiv
_except_handler3
exit
memmove

gdi32

GetObjectA
SetPixel
GetTextMetricsA
CreateSolidBrush
MoveToEx
PatBlt
LineTo
SetROP2
ExtTextOutA
DeleteObject
CreateCompatibleDC
GetTextColor
GetBkColor
BitBlt
SelectObject

user32

GetFocus
GetWindowRect
DefWindowProcA
ShowWindow

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 686KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ