2fc8ed0d6ca32cf1d1a870370d007453 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fc8ed0d6ca32cf1d1a870370d007453
Size

183KB
MD5

2fc8ed0d6ca32cf1d1a870370d007453
SHA1

a3977b13cc2522c0b0af7f4be2492f389aac0d51
SHA256

3eebc41fa2cba12f41d2570382f0ab93c418cb86bf1a8752c17be77a96a2278c
SHA512

60f8493b857e1c498a56939e5fb815df3f3eeb7544074b93bbf6517b7c03baffdddd0a26b47efc267e24864c7ebcd0a39e84838ee8d26c859a6c22111f393af6
SSDEEP

3072:opezTOXnh49os2g43MdsgNqdlOCZaRiI2M3:6dhdg48dsgwdl1ZaAI2s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fc8ed0d6ca32cf1d1a870370d007453

Files

2fc8ed0d6ca32cf1d1a870370d007453
.exe windows:4 windows x86 arch:x86

bbf12bea27553f1d7451e2c8209f83f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
FindResourceA
GetProcAddress
Sleep
SetStdHandle
LCMapStringW
LCMapStringA
ReadFile
GetStringTypeW
GetStringTypeA
SetFilePointer
FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetLastError
CloseHandle

user32

SetTimer
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
MessageBoxA

Sections

.text
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ