2e9e3843c281b54542a39ed7b4ea63d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e9e3843c281b54542a39ed7b4ea63d9
Size

305KB
MD5

2e9e3843c281b54542a39ed7b4ea63d9
SHA1

095f2d2afe4abe6368a06dc7e40f354b53bd38ff
SHA256

43e325f5d7aeb8888d2e93d362fefd7fc71ca64fc615186d391d93b303a1ccff
SHA512

3a24ee75548f156d75775ce7439d40fcdfc825a90242e9c8ec6ced8a0009c846f6f91300562d7900d725ab883fe758e0deb593d55ff81936ff4d1642b3c1f1f3
SSDEEP

3072:clJimnuKcGUfBs+d7I0/ZQMlaS2bX6peoLvpuxpJlL9W24WkXz4lU7tpi6t4cDjy:cB2x7JlanKpfv8P9Dkj4+tpi6tzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e9e3843c281b54542a39ed7b4ea63d9

Files

2e9e3843c281b54542a39ed7b4ea63d9
.exe windows:4 windows x86 arch:x86

2b421c01d198c39f573f396b0c8ddba8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetKeyboardLayout
GetDoubleClickTime
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
MultiByteToWideChar
LockResource
LoadResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
LoadLibraryA

comctl32

InitCommonControls
GetMUILanguage

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE