2a057c89b1d96ced1724c089b154753b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a057c89b1d96ced1724c089b154753b
Size

255KB
MD5

2a057c89b1d96ced1724c089b154753b
SHA1

db2e2e72c8f4670a9e4bf4c9a743dcda2510d000
SHA256

0d17c1b7ac57d9ef3b84b7c601cec5c593f87d49d0c6ca6ea49bb0e2c01caccb
SHA512

ede01cedd3c9aebfd4e8167a873f59039b06b508e492f3def498afd1902017c5f6ccc89bd8e9a8fa78e996d855af39f9befe4e55b0d71e7f97b6999f14e67202
SSDEEP

6144:e/jyywaV4meKBMqiehW00g4KjsZPyO/2PeKwoCyO1P2+Mau:8jMajedqiWz0gFO/VBTfHu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a057c89b1d96ced1724c089b154753b

Files

2a057c89b1d96ced1724c089b154753b
.exe windows:4 windows x86 arch:x86

0767559f4da070469ff0689f61ccf335

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
RtlUnwind
CreateSemaphoreW
CompareFileTime
ReleaseSemaphore
GetSystemDirectoryW
GetModuleHandleW
GetModuleFileNameW
CreateFileW
GetLocalTime
HeapDestroy
GetVersionExA
FreeLibrary
LoadLibraryW
GetProcAddress
GetCurrentThreadId
GetLastError
LocalFree
GetVersionExW
HeapFree
HeapReAlloc
HeapAlloc
CreateSemaphoreW
ReleaseSemaphore

oleaut32

DispGetIDsOfNames
OleLoadPicture
OACreateTypeLib2
SysReAllocStringLen
OleLoadPictureFileEx
VariantClear
OleLoadPictureEx

advapi32

RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA

ole32

CoTaskMemRealloc
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree

shlwapi

PathFindExtensionA

Sections

.text
Size: 142KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ