2ed62c48abf2881c93f41aa6d220529b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ed62c48abf2881c93f41aa6d220529b
Size

295KB
MD5

2ed62c48abf2881c93f41aa6d220529b
SHA1

d640b9f3266b5d0e8a5cd5f3167575c9e27ecb0d
SHA256

630751f3f1208e10e100bc6c8eca31c6674aa7b562c82d0215ad925babdfd07f
SHA512

ec1e2156c1a626e1c14e31d2556e1b650b49f5f4e995f749f888b7150f4672d25517dd3242b4cb3b24904d4a1c164a338ef0196deb729baa74889d0c36f69a4f
SSDEEP

6144:x5MiHl5AZJBEt1ff8BzqxTMHBUs6sFU1EvfxekzsPB0F2RcUrqvhCn3g09OE:x5MiF+Z/Et1fz5iBxFU1E3xkuF2Rm4nw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ed62c48abf2881c93f41aa6d220529b

Files

2ed62c48abf2881c93f41aa6d220529b
.exe windows:4 windows x86 arch:x86

2d5e4ee2a520e9ebb7d9d4163107736a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
GetAtomNameW
GetOEMCP
GetLocaleInfoA
GetCPInfo
IsValidCodePage
GetACP
HeapSize
WriteConsoleA
TlsGetValue
GetConsoleOutputCP
VirtualAlloc
EnumResourceNamesA
GetDateFormatA
MultiByteToWideChar
SetFilePointer
FindResourceA
SetStdHandle
RtlUnwind
TlsSetValue
GetTimeFormatA
HeapReAlloc
RaiseException

occache

FindControlClose

shell32

SHGetDataFromIDListW
ShellExecuteW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteExW
DragAcceptFiles
SHGetPathFromIDListW
SHGetMalloc
SHAppBarMessage
Shell_NotifyIconW

Sections

.text
Size: 143KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ