2fcef38b2934025b7b8d77884692cd06 | Triage

Sharing

General

Target

2fcef38b2934025b7b8d77884692cd06
Size

23KB
MD5

2fcef38b2934025b7b8d77884692cd06
SHA1

5a0bcf2cb84579d18874bb2c0f14c9a659e22533
SHA256

3ec11342bc60397c63a72bce83889dcadda048fb2e2c36cde0fd17aa2be56679
SHA512

6219f336cdc0bb23cd461e44a3dcc602d5fc4b3ed5acdecfad2a850b6665b91619f862a05e4e4d3f8ef98486c42aebe77b1d4f1cfc6dc08ee8aa0e64271aed90
SSDEEP

384:C/je72ugFirE2RTwnpXtp+bSV5WNHWR9+EMQ2t:ueSiJTwbYlY9lKt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fcef38b2934025b7b8d77884692cd06

Files

2fcef38b2934025b7b8d77884692cd06
.exe windows:5 windows x86 arch:x86

11ccb4e69b1279ecabec8d9d7ccbf149

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

msvcrt

memcpy
memset

user32

CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA

gdi32

GetStockObject

advapi32

RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ