2178a0a2f96cbd9a7fa52ba3967491f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2178a0a2f96cbd9a7fa52ba3967491f3
Size

22KB
MD5

2178a0a2f96cbd9a7fa52ba3967491f3
SHA1

1f1e921f54dedc0d466c7636dafed45042911779
SHA256

6ff7b54235b01f676063cf53220d3f74afc73da54efc2eb7c8145506d2e7615f
SHA512

f8a9d6d8458d9c6b7db2e50a71dd7980ed8bd60d66da39d4833945204c97eb03ad0b851fbac7e540f332b0f27a92827fce58c725cacb526e30217cf20f38b516
SSDEEP

384:bESREEhXB8FJ6eKOTfZdD2PiOJNOO1MRlmhRhb83VBVErGbNHfS5K/cpTvRe:AS9XB8FJ6eKOTfZdDulNOoMRox83FErU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2178a0a2f96cbd9a7fa52ba3967491f3

Files

2178a0a2f96cbd9a7fa52ba3967491f3
.exe windows:4 windows x86 arch:x86

c2022d59063a3bee3e08b0792cf5ab79

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

DisconnectNamedPipe

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ