2246d7c8d551333a668f06f2f3d49dc6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2246d7c8d551333a668f06f2f3d49dc6
Size

48KB
MD5

2246d7c8d551333a668f06f2f3d49dc6
SHA1

53bbdd53f51947c69c8f6af125c0bb4a5c0ad571
SHA256

8caf30697df02476be789d70a8763b833d7343fd1e9947c164522acab9d10866
SHA512

6ccbd6bcd1991ed06fc0d8d3f7336631043efc27f46b75c010890bb9a669f99e62007f0cc21bce9a3f1b2a6586a6befeb9b7c21f88ec07dcfaad88b9b474cec6
SSDEEP

768:Wn3SBAdJ22b2xpj3wnyaX6+RjUuQdTn9cHdx/s6hs9LokC:wSBAbp28LbdRgHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2246d7c8d551333a668f06f2f3d49dc6

Files

2246d7c8d551333a668f06f2f3d49dc6
.exe windows:4 windows x86 arch:x86

dd211e2c83c9b4642c33fed8c81b90d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strncmp
strchr
sprintf
_itoa
_chkstk
atoi
strstr
strncpy
memset
RtlRandom

kernel32

lstrcpynA
VirtualFree
VirtualAlloc
OpenProcess
SetCurrentDirectoryA
GetTimeZoneInformation
GetCurrentProcessId
GetWindowsDirectoryA
GetSystemDirectoryA
ReadFile
Sleep
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
GetSystemTime
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
GetLocalTime
GetCurrentDirectoryA

psapi

GetModuleFileNameExA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE