2efacad0d826fddd62092d083de56943 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2efacad0d826fddd62092d083de56943
Size

296KB
MD5

2efacad0d826fddd62092d083de56943
SHA1

61a345e34f8f35a72f1dadf59029839a57e215f8
SHA256

a560f28b147af22b87d9d0a96cbc0a0871e9f780d21e3f4d5596002fe0436a42
SHA512

cfdc561f59d16260fe9a266ff70af19c5c48a46bc6d933fcc1ea35c9565e7be96983db8041ac8512e73b23e6e3bf0d5db6cead716cd51a99bf4bd4e6315a7069
SSDEEP

6144:5t1uQ8ashQ0v2ZJb/Dnlu73ZlgtzELzciyXDCbtx7M2NQp1:5/8nGoKb/DnloZlYE/vtl0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2efacad0d826fddd62092d083de56943

Files

2efacad0d826fddd62092d083de56943
.exe windows:4 windows x86 arch:x86

678986d7fe8eb1ebce8a0b924f59474d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempPathA
VirtualFree
lstrcpyA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
CloseHandle
WriteFile
lstrlenA
VirtualAlloc
ReadFile
CreateFileA
GetModuleFileNameA
GetLastError
CreateMutexA

user32

SetCursor
LoadCursorA
wsprintfA
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 574B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ