282c3abcf5533377d684d2fc30593de2 | Triage

Sharing

General

Target

282c3abcf5533377d684d2fc30593de2
Size

47KB
MD5

282c3abcf5533377d684d2fc30593de2
SHA1

54eeb60bf47f6b4c425f0484e676c86e6f8ea0b6
SHA256

48551f06148a3e049fa73acf13ff21c5beb19c29880b16b15a38a6e6cca0adb3
SHA512

e39b7a87a60e01403461771b8b46423b230726b0a57405707feeb206ddad6f9b473104831ed92fb37029fa355bb372e2d38c14e6dabfe3f51e9f843bf191e82c
SSDEEP

768:J9cU4gjwIYy0LXzGkhe9sArPPG/S9g5jNjnYxDE9teQ8iN/ZhV4IG/aH8+sc6y7b:JKgt0Ddhe9bWt5jNMd0tec/ZhaIGyn6D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
282c3abcf5533377d684d2fc30593de2

Files

282c3abcf5533377d684d2fc30593de2
.exe windows:4 windows x86 arch:x86

44c9f4c573c72bd47c13a3619156f50d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
DebugBreak
DeviceIoControl
ExitProcess
GetCurrentDirectoryA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetShortPathNameA
GetThreadContext
GetTickCount
CreateFileA
IsDebuggerPresent
QueryDosDeviceA
ReadFile
ReadFileEx
ReadProcessMemory
SetCurrentDirectoryA
SetEndOfFile
SetVolumeLabelA
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WriteConsoleA
WriteFile
CopyFileA
GetVersionExA
CloseHandle

wsock32

WSAStartup
WSACleanup
gethostbyname

user32

GetWindowRect
GetWindowTextA
MessageBoxA

gdi32

SetTextAlign
GetColorSpace

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE