2a33ebc2a02183d93350064b4f823dca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a33ebc2a02183d93350064b4f823dca
Size

39KB
MD5

2a33ebc2a02183d93350064b4f823dca
SHA1

71d24d74ef17ac3c7e0d11a68858fce720760c96
SHA256

b691fe41fcc5f2f4419cc624621353126c9f3f68bda57b998a20470a6cc7b91f
SHA512

afd946d391213850e528f6b49f4fc6ace16ed4673f14c12b263ec632816b96c4a01f39002897e9cc8996d854a1f588fe377713b322a2e21fefcc63d456ff1002
SSDEEP

768:QPNqMBy1QMMMMMMMMMMMN88888QmEjhG0ODoCAuKp6WfdzGESjpeg+T:MNqM0QMMMMMMMMMMMTNkeldzGEIez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a33ebc2a02183d93350064b4f823dca

Files

2a33ebc2a02183d93350064b4f823dca
.exe windows:4 windows x86 arch:x86

1a6a8f3739945a8cf5fb822794b2157d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GlobalAddAtomA
SetErrorMode
SizeofResource
GlobalDeleteAtom
GetLastError
EnterCriticalSection
Sleep
VirtualProtect
GlobalFree
HeapCreate
LockResource
GetLocaleInfoA
CloseHandle
GetACP
GetPriorityClass
GetStdHandle
LoadLibraryExA
MultiByteToWideChar
SetConsoleCP
RaiseException

user32

AnyPopup
GetActiveWindow
EndPaint
GetCursorPos
GetParent
DrawTextA
BeginPaint
GetFocus
ValidateRect
IsIconic
GetMenuItemInfoA
GetWindowTextA
ReleaseDC
GetWindow
GetClassNameA
DrawEdge
DrawMenuBar
GetForegroundWindow
ShowWindow

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
VerFindFileA
VerQueryValueIndexA

mapi32

MAPILogonEx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ