2eb526768b339eba1c179471f276a14f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb526768b339eba1c179471f276a14f
Size

105KB
MD5

2eb526768b339eba1c179471f276a14f
SHA1

2699c5173fe7e4a12dbc8ce40105de20d778e37d
SHA256

e3bb0eb2c86565796e00133a0215d11095623f6588c014f528bddeca13ea11d2
SHA512

3981249b876be6528aee0e5749995b010a2de2f8095c23babfea4259ea4f741dc928ff8f5b429ed6dc09db6760f70c17ab40ee6202048a183adf70f0ba49776f
SSDEEP

1536:gmtoBpVwonSonMQm1uY+f/+6RAn3bVfzIgQYL/E+34Ue6XqASSJj9tIg9D:gnBpVwoSdIY+usALtzITYL/ENUe6w6kQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eb526768b339eba1c179471f276a14f

Files

2eb526768b339eba1c179471f276a14f
.exe windows:4 windows x86 arch:x86

3f35115a995406ab57e0afcc97b046f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupIterateCabinetW

ole32

CoUninitialize
CoInitializeEx

shell32

ShellExecuteExW
ShellExecuteW

user32

MessageBoxW
wsprintfW

kernel32

FreeLibrary
ExitProcess
GetStartupInfoW
LockResource
SetEnvironmentVariableW
CreateFileW
LoadLibraryA
GetModuleFileNameW
lstrcpyW
WriteFile
VerSetConditionMask
WaitForSingleObject
GetCommandLineW
GetTempPathW
SizeofResource
FindResourceW
GetLastError
GetModuleHandleW
GetProcAddress
LoadResource
GetExitCodeProcess
CloseHandle
DeleteFileW

Sections

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 416KB - Virtual size: 414KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ