2a2d701529e978aed6961fed4003ce49 | Triage

Sharing

General

Target

2a2d701529e978aed6961fed4003ce49
Size

137KB
MD5

2a2d701529e978aed6961fed4003ce49
SHA1

163be87edda1244e51ea2f8863074485a83b2827
SHA256

9233bf3a153a9e99b0e7cad96f0e332234b8663fc5645ce085180b65b5ff6d9a
SHA512

63f304c2a2d504d9b4060a7f93e7d3f2efd5075aacfd4a6f77f9f792a6ad49cfa4986294ecc0396a132f885210694242506512ba0bfbb6164aa9e2ba303393ea
SSDEEP

3072:Ndvx5R5+02nGPrJOFulqeneDsF6rXQHgJRXPhVWXp8c9:NlV5mo5neAFGCCRhVWyc9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a2d701529e978aed6961fed4003ce49

Files

2a2d701529e978aed6961fed4003ce49
.exe windows:4 windows x86 arch:x86

241333aebe98b9b235e82ca2967af76e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumDateFormatsExA
EnumTimeFormatsA
ExtendVirtualBuffer
FindFirstFileA

msvcrt

_wgetenv
_winmajor
_winminor
_wmakepath
_wsopen
_wspawnle

shell32

DragFinish
SHFileOperation
SHFormatDrive
SHGetFileInfoA

comctl32

ImageList_GetFlags
ImageList_GetImageRect
ImageList_SetFilter
InitMUILanguage
ImageList_GetDragImage

Sections

.text
Size: 63KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE