2670566309ed6a996742127e27de6492 | Triage

Sharing

General

Target

2670566309ed6a996742127e27de6492
Size

153KB
MD5

2670566309ed6a996742127e27de6492
SHA1

9b96fa6fb82350f80a280bf4bbc3976b37045d03
SHA256

c34ce21676b7923c404100e03bd6554f77d262e21dc504b15410e4e82eb87415
SHA512

f2c55077730ab6a39f32a188b19bb75e2d6a271391079774afd832fff734566897bf0dd7bfb0789acfb9a968e10e4add43e9ff55bb3343e9b4b7fe25a081f80f
SSDEEP

3072:8Ue3ZPt1F3Y89tjPGbGHT2kDVtJ/r/6bf1GEsLpICxuKt:8NBLljGKz2kvgb0lpI/S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2670566309ed6a996742127e27de6492

Files

2670566309ed6a996742127e27de6492
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE