2138ba54d4c02fbcb623b179e3c83822 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2138ba54d4c02fbcb623b179e3c83822
Size

248KB
MD5

2138ba54d4c02fbcb623b179e3c83822
SHA1

f40a2954ce566cfdfefcc3bbd617a3f3fdd60daa
SHA256

94e034d2aaf6db33013c237df9d7985d69312ecafccddcb2945c5cd3680ddbe4
SHA512

38fd686f5730fb9ceae84659597300bf0e09b725e38dbe38435e9baf0fe1fde541b37b79b261e7857f90368612540abcf11b9b4f3c4dd87a332d8dccc4dc9c8f
SSDEEP

6144:WNUYWxRXLYOUdqfM771rQJBsAqRNurbCz:WK3/71UQoAhK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2138ba54d4c02fbcb623b179e3c83822

Files

2138ba54d4c02fbcb623b179e3c83822
.exe windows:4 windows x86 arch:x86

7b4d997ae5d4c98bb45dfd3446d5ede3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

LoadResource
lstrcpyA
lstrcatA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetProcAddress
GetTickCount
LoadLibraryA
WriteFile
LockResource
SizeofResource
Sleep

urlmon

IsValidURL
CoInternetCompareUrl

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 532B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 234KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE