2542855bbbd126c4e0d95a8839852fad | Triage

Sharing

General

Target

2542855bbbd126c4e0d95a8839852fad
Size

3KB
MD5

2542855bbbd126c4e0d95a8839852fad
SHA1

3257d290d4aa505bb5a541f9e8fc3ff6ca042417
SHA256

11d1ba1ec279499efa8ad5be17955f437e4eed60bc1941fdc3ed757b1cc353bf
SHA512

dc4fbb88bb9490a0e47670c7d394a141c27e8492da75d7ad65b74fa6bc04b8c9f9cb6bd6c68f6ea9aab7dc0e1790a249d6340682a5506061bbdae0ca79e4503f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2542855bbbd126c4e0d95a8839852fad

Files

2542855bbbd126c4e0d95a8839852fad
.exe windows:4 windows x86 arch:x86

f21aa246ece3116b0427318b581eb524

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
Sleep
WinExec
GetModuleHandleA
GetStartupInfoA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

msvcrt

_adjust_fdiv
strrchr
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ