2b9c61d2ecc48d5976f09c31cfe8ec4b | Triage

Sharing

General

Target

2b9c61d2ecc48d5976f09c31cfe8ec4b
Size

536KB
MD5

2b9c61d2ecc48d5976f09c31cfe8ec4b
SHA1

11ab110b785b4575f0d49336ebaf19b96c4dfd94
SHA256

83ac5cda1b22b7140e821b351e549f00c2543081973b86b520ac9f53a16d076b
SHA512

0b8ccf744d8e46b74a719cbfb0e28439b7dccd474977afc8cd7ba67126c3c0417b27fa20464763a256c868b2bd8c09aa9501ee3686474c355189529775506dba
SSDEEP

12288:Ham2/42gigkUknyGSLtwo73up/Rbiv5AtQltDgRy6R4O:jW42ekUeyGSLtwo7upZbiYQlxgR7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b9c61d2ecc48d5976f09c31cfe8ec4b

Files

2b9c61d2ecc48d5976f09c31cfe8ec4b
.exe windows:4 windows x86 arch:x86

592c1df8fb86eb0c8ac307bccd409b69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
exit
__set_app_type
_except_handler3
_controlfp
_cexit
fopen
_XcptFilter
_exit
_c_exit
fclose
malloc
free
fwrite
div
isalnum
isalpha
isdigit
isgraph
islower
isprint
ispunct
ldiv
ceil
srand
rand
__p__fmode
sprintf

shlwapi

SHSetValueA

shell32

SHCreateDirectoryExA
SHGetSpecialFolderPathA
ShellExecuteA

kernel32

WinExec
OutputDebugStringA
GetTickCount
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
CloseHandle
WritePrivateProfileStringA
SleepEx
lstrcatA
DeleteFileA
GetStartupInfoA

Sections

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 504KB - Virtual size: 502KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ