2a2a10035f96a1f96feff14a43eeb18f | Triage

Sharing

General

Target

2a2a10035f96a1f96feff14a43eeb18f
Size

424KB
MD5

2a2a10035f96a1f96feff14a43eeb18f
SHA1

87f7b941d79a57b5ce38914fb0f857dc0381ab04
SHA256

ddf6a26c98362a4f9a89efc32f9814680272146640c7caeca6b0b26a0f7dd079
SHA512

5b2b4fb7bf1e888fffe8e1ff69037f42aa9e0be98ec6cbf3cf95d3553fcea5ef1e9331f7782e47cb718da7baf69e4b8cb69bce334861f026d78db0f18dfd0ef8
SSDEEP

12288:wKMuxqWyqVu8UN9mnPDTNOCsGoWWbNCpPYuph:VMutyKCmnPDTNOCsGoWWbwx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a2a10035f96a1f96feff14a43eeb18f

Files

2a2a10035f96a1f96feff14a43eeb18f
.exe windows:4 windows x86 arch:x86

2a05e76b013c7125fa7c1e7a8f4f524c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
exit
longjmp
_exit
sprintf

kernel32

GetStartupInfoA
GetCommandLineA
FreeLibrary
InterlockedExchange
Sleep
GetModuleHandleA
LocalAlloc
LocalFree
LoadLibraryA
GetProcAddress
GetLastError

user32

CharUpperA
MessageBoxA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

_mFdllinfo

Sections

.text
Size: 404KB - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 982B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE