2641a5ff2135ea31058e900ad0da784a | Triage

Sharing

General

Target

2641a5ff2135ea31058e900ad0da784a
Size

433KB
MD5

2641a5ff2135ea31058e900ad0da784a
SHA1

04a5fd17383e773a48d02cadb61d61de08420a2e
SHA256

54dabaca61e663e776594dfd6b538cd20f9e4cae1685ae9256363623acc638b1
SHA512

aea653a7a8fea01df0c5d3c1c9cc54e924e1963766a04cac3ce213b221e6d3db60d58697c2a8ab6d1723a8565e00e489bba472552947bd0497902ee0b775c597
SSDEEP

12288:A9izqFKBcgS9k+QyME2KDTu7xViNyD56FQ:by2M9kA22HqyQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2641a5ff2135ea31058e900ad0da784a

Files

2641a5ff2135ea31058e900ad0da784a
.exe windows:4 windows x86 arch:x86

80a846831c213af973e82e8c04fa8356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
HeapDestroy
FindClose
GetFileSize
InitializeCriticalSection
SuspendThread
SetEndOfFile
GetTickCount
ExitProcess
GetSystemInfo
WaitForSingleObject
CreateFileA
HeapSize
ResetEvent
ReleaseMutex
GetModuleHandleA
FindClose
CloseHandle
GetEnvironmentVariableA
HeapCreate
DeleteFileA
GetCurrentDirectoryA
GetTickCount
CreateMutexW
AddAtomA

wininet

FtpOpenFileA
FtpPutFileA
DeleteUrlCacheEntryA
FtpFindFirstFileA
FtpGetFileA
DeleteUrlCacheEntryA
DeleteUrlCacheEntryA
FindCloseUrlCache
FtpGetCurrentDirectoryA
HttpEndRequestA
HttpQueryInfoA
FtpCreateDirectoryA
FtpDeleteFileA

encapi

DllGetClassObject
DllGetClassObject
DllGetClassObject
DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 624KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 427KB - Virtual size: 427KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ