2499726e2879c12ab4f1ea9dea899364 | Triage

Sharing

General

Target

2499726e2879c12ab4f1ea9dea899364
Size

52KB
MD5

2499726e2879c12ab4f1ea9dea899364
SHA1

cfbdb5bb3945634f1bc2ab69cc0ac2dbcbe51848
SHA256

32fb85f486ba580d25398d728b872849ebb1881bfb69dab639a118c6f67cc495
SHA512

83bc31f66d72aeccb8771de838d51ff73b537cb8793cb1bef061f2064e5b68ca6791253aec113f7883a836c4fe36a307f6e4cc1e1979df73da6acbf08707c3b1
SSDEEP

768:pfQwzOFcZIvTFyZnfaKXrBdP+I6wiD9NE6qo6j+Zlqi1+TsC6v7VaHvx8eClUu0i:qwzOSEqiK7vGn9NE6gSTCxg7AYgx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2499726e2879c12ab4f1ea9dea899364

Files

2499726e2879c12ab4f1ea9dea899364
.exe windows:4 windows x86 arch:x86

1f40ee2fe8c9879b8245baa8dcecae27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CommConfigDialogW
DeleteFiber
ExitProcess
IsBadCodePtr
IsBadStringPtrW
IsBadWritePtr
LockFile
ReadConsoleOutputA
RequestDeviceWakeup
SetErrorMode
SetPriorityClass
SetSystemPowerState
SizeofResource
WinExec
WritePrivateProfileStringA

advapi32

ConvertAccessToSecurityDescriptorA
CryptExportKey
CryptSetProviderA
EnumDependentServicesA
GetSidLengthRequired
InitializeAcl
OpenEventLogW
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueA
TrusteeAccessToObjectW

user32

CheckMenuRadioItem
DestroyCursor
EqualRect
GetClassLongW
GetDlgItemTextA
GetMenuStringA
LookupIconIdFromDirectory
SetDeskWallpaper
SetMenuItemBitmaps
SetMenuItemInfoW
SetScrollPos
SetUserObjectInformationA
UnregisterClassW
UnregisterHotKey

gdi32

CreateDIBitmap
CreateMetaFileA
DeleteColorSpace
EqualRgn
FillRgn
GetCharABCWidthsW
GetEnhMetaFileDescriptionA
GetPixel
GetTextExtentExPointA
MoveToEx
PathToRegion
SetSystemPaletteUse
SetWindowExtEx

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE