2fb13c1af614ae1072b1d7a1a9fe52fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fb13c1af614ae1072b1d7a1a9fe52fc
Size

192KB
MD5

2fb13c1af614ae1072b1d7a1a9fe52fc
SHA1

499c73f45fa68cb144a5d5b47730b8ea9e478fb6
SHA256

75e69d28019b45667f3a01ad2c6c5372d05a87dbb3c5a0182ce8b9c0211c9afa
SHA512

8050c17c42af9f38219447ac19835ca64fc42a6e321d1af5af3bc460bdbe3bdcb74f4573065327b1ef96b3d6640788ecb26d6e46ffeb38ae61fe9653217e88c6
SSDEEP

3072:nJxOReKCU3MDUZD6K9VK+idBhNZAxdJIeQ7hqrw1o98PsMBv3MCmJp2oq:J8Rp/MA6K9VK+irfKx/8GcsMBvMCmJp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fb13c1af614ae1072b1d7a1a9fe52fc

Files

2fb13c1af614ae1072b1d7a1a9fe52fc
.exe windows:4 windows x86 arch:x86

ab997975087722516438586ccbf05798

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

msvcrt

_itoa

ws2_32

connect

user32

GetWindowTextA

advapi32

RegEnumValueA

shell32

ShellExecuteA

oleaut32

GetErrorInfo

Sections

.ASS
Size: - Virtual size: 268KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ASS
Size: 191KB - Virtual size: 192KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE