6a2a1cd804a94a6ab689aecd972de8aa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a2a1cd804a94a6ab689aecd972de8aa
Size

208KB
MD5

6a2a1cd804a94a6ab689aecd972de8aa
SHA1

665e73cff0625a26ac6ee6b20f7e16c9da5746ab
SHA256

c61572d459e5a51736fdefa13788f5a69a7c9ed67b7cdf5a074ff83bc5f4bcd1
SHA512

8d64b444e32f974e632d7c10bf8cf21b341072fa14ae6ff946f2221ad4c7799d635682a5b64f4fd3efba4c061c16db721751cdb50c6994acb1f99a35efe344fe
SSDEEP

6144:MysGpakfosTz8m3fgYvdO7litv+di5SIB9+4lm:eGpa7sTz8oFvdwliVv5SIvm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a2a1cd804a94a6ab689aecd972de8aa

Files

6a2a1cd804a94a6ab689aecd972de8aa
.exe windows:4 windows x86 arch:x86

9d38fc7ab11f55ecfe29a74e126aaa91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
ExitProcess
ExitThread
GetCPInfo
GetCommandLineA
GetConsoleCP
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetPriorityClass
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
HeapAlloc
LoadLibraryA
MulDiv
QueryPerformanceCounter
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect

msvcrt

wscanf
atof
fseek
sscanf
strlen
strncat
strncmp
strstr
wcscpy
strcat

user32

SetWindowLongA
SetClassLongA
ScrollWindowEx
KillTimer
GetWindowTextA
GetCapture
EndPaint
DrawIconEx

comctl32

ShowHideMenuCtl
MenuHelp
InitCommonControls
DrawStatusTextA
CreateToolbarEx
CreateStatusWindowA
CreatePropertySheetPageA
CreateMappedBitmap

Sections

.text
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ