2962f67dd94326991e1883deb36a29d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2962f67dd94326991e1883deb36a29d2
Size

110KB
MD5

2962f67dd94326991e1883deb36a29d2
SHA1

e853b910c307081136aed421629af1209ff9d17d
SHA256

35616e67a52f2edcb6d1d7302a5e42601217f0b3ef2fbda95bb8fda190ea1c22
SHA512

f51df9a68169fe1ace643655c6a39c8123c5836f36196bc892054a06ddf23a3d6df9c24c2e139cb28a0208c31778c220d0cca16464a9d854fbfef2688e338aa6
SSDEEP

3072:cBX4jdbux+sOAUmeHJ+2j47BeHHYvajhjaJDSPfZ1rv5wJI:cBlcAUmefnyemJD2TrRN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2962f67dd94326991e1883deb36a29d2

Files

2962f67dd94326991e1883deb36a29d2
.exe windows:4 windows x86 arch:x86

855d28b330c7a179c1eeb3d4a3d18595

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePalette
GdiGetPageHandle
GdiPlayJournal
GdiPlayScript

kernel32

CreateMailslotA
DeleteFileA
EndUpdateResourceA
EraseTape
FatalExit

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

user32

CheckMenuItem
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

Sections

.text
Size: 62KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE