2f1d20a85acad53126ebbaf0d87360ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f1d20a85acad53126ebbaf0d87360ce
Size

156KB
MD5

2f1d20a85acad53126ebbaf0d87360ce
SHA1

4348a7befd53964d5c0417362ce4002feaaed75e
SHA256

5bcf7cb2430960eb053f8f51dccc9c4d3a5e387c9b7558865b004d844d2395dd
SHA512

b10d47aa1cd48db603cdca5404fac0e175c9ae665eab43edbe9abdfc55919dcf2e1b5bc8d31ff6acf18aa47cd2012425ae4d92870dfacc79a2556da0653466f7
SSDEEP

3072:VXzyt34u8X4+fAk45z9XHcW4v5e9EJ7Nhcf84j/4joCGoFZf0rpiXl3Smi44u:VXzy54u8Lfp45z9X855sMBhy8DjHGWh/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f1d20a85acad53126ebbaf0d87360ce

Files

2f1d20a85acad53126ebbaf0d87360ce
.exe windows:5 windows x86 arch:x86

137a9b4a6059d8b53e3c9d8dbb713fc9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateRectRgn
GetRgnBox

kernel32

CreateFileMappingW
GlobalMemoryStatusEx
GetModuleFileNameW
GetComputerNameA
EnumResourceNamesW
VirtualProtect
CloseHandle

user32

SetWindowTextW
MonitorFromPoint
DefWindowProcA
GetUpdateRgn
TranslateAcceleratorA
SetMenuDefaultItem
TrackPopupMenuEx
WaitForInputIdle
SetFocus
AdjustWindowRect
EnableMenuItem
IsWindowEnabled
CopyRect
SetRectEmpty
FindWindowExA

ntdll

RtlCompareMemory

Exports

Exports

?TemporaryArrayCre

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE