2b71d97036249769357f4cb780a0ec05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b71d97036249769357f4cb780a0ec05
Size

151KB
MD5

2b71d97036249769357f4cb780a0ec05
SHA1

71b74f217169c3e96269fc674df71210d7c58416
SHA256

d8721cb13fde9e8819fe4b0c5469de526424408b04650afd1b57f0ef55485614
SHA512

3d61efd75a05c3ead4e58ea73de996e267e6dde8e281a09987c753062a2738b06d379db15b52353cd5fb55d99098a9a73e89104b43f5256ebe9e4af866012c39
SSDEEP

3072:kCQnHdkIEFPTVrX3A3odikjeudJDslMF2ZzjJubwftAE:kCiehVrkkEWFc3Jcwp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b71d97036249769357f4cb780a0ec05

Files

2b71d97036249769357f4cb780a0ec05
.exe windows:4 windows x86 arch:x86

c575aa918bac818b364b37306f370a66

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
WinExec

advapi32

RegQueryValueExA

urlmon

URLDownloadToFileA

Sections

.text
Size: 20KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE