2156bba6a3e8a6ad423bbe681ea04f2f | Triage

Sharing

General

Target

2156bba6a3e8a6ad423bbe681ea04f2f
Size

34KB
MD5

2156bba6a3e8a6ad423bbe681ea04f2f
SHA1

1bbeae588e39d23feee1bc0c0158d7cb4392766b
SHA256

649b9f0c659438a020cea4be59b07e8e58bcc4501bedda3511aea095a5cf3781
SHA512

d9b83312b9af8b01f119907ccbf9dfb78eac8baa56c69d749b1ad79c7dd5f979bc4f400c47fb3ff14c9deecb6d814f9c7c71d86311cd3336848d2d42404bd996
SSDEEP

384:5Go5XF5l4NdVt846Nuxo/Dgcp4mdASSv4Tgnk2GEZp9SWI+xAUt+qqJyIzL65yfI:5GoZX6wrDgcDkwgnkZA9MuAUYGe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2156bba6a3e8a6ad423bbe681ea04f2f

Files

2156bba6a3e8a6ad423bbe681ea04f2f
.exe windows:4 windows x86 arch:x86

af7fdb9ebf2cb69a553a3b994499fc16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

DragQueryFileAorW
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE