2f883a7c287cb6d0a0be3c7ce23feef5 | Triage

Sharing

General

Target

2f883a7c287cb6d0a0be3c7ce23feef5
Size

573KB
MD5

2f883a7c287cb6d0a0be3c7ce23feef5
SHA1

b547618db29fdd7605e2e3cb8b33d21ae8755e19
SHA256

be67c97f32d097baf5077a4644253839c60372c0beae1ed40a43907f22c784a3
SHA512

1dbb3036c89070d6b4c7c14e2ec3f5f4908189b2c858bc5013e86c87c9c4c9a609a907056d7b6f594e79627ba221a798881eb4865f1f845b575d5f7804378e29
SSDEEP

12288:H2Lz98VIHHtulcVRGBMgfbsOKYg3h4ihFpUnb+bEpvYKBfAGc/oo:O5/HVuffKYkxhFpUn6QpAKiAo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f883a7c287cb6d0a0be3c7ce23feef5

Files

2f883a7c287cb6d0a0be3c7ce23feef5
.exe windows:4 windows x86 arch:x86

72417b03d80db6cef886cf2e6d937a4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_amsg_exit
_initterm
free
malloc
_XcptFilter

kernel32

Sleep
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
MultiByteToWideChar
InterlockedExchange
VirtualAllocEx
GetModuleHandleA

user32

CreateDialogParamA
GetMenu
SetMenu

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 424KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ