2bc001ee68fcee69a120bae17b86302b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bc001ee68fcee69a120bae17b86302b
Size

510KB
MD5

2bc001ee68fcee69a120bae17b86302b
SHA1

f35eb723c095533e7a8402d7fde79df489a545c9
SHA256

78edb4fa68049a7bcdf4d840909c2775b40fb222aa2e640ae1145dcbb774970b
SHA512

90ba91d9f4f15fd1107d6e981d629b59de34fb36f8e74af4e0bd5fbb08ea1dd69efaac82dcbb44020159e92ce32363fe8456ce749d5d350b9844fba02e345660
SSDEEP

12288:WO0TF0dsBtNIDvqYqQXNyKrDuy3LB1y8z:WO6UsBEOQXNDx1fz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bc001ee68fcee69a120bae17b86302b

Files

2bc001ee68fcee69a120bae17b86302b
.exe windows:4 windows x86 arch:x86

6d47784dd88b08855798c0450d9276ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHSetValueA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
SHCreateDirectoryExA

msvcrt

_adjust_fdiv
__setusermatherr
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
__getmainargs
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
fopen
fclose
malloc
free
fwrite
srand
rand
sprintf
__p__commode

kernel32

lstrcatA
SleepEx
WritePrivateProfileStringA
OutputDebugStringA
CloseHandle
GetStartupInfoA
WinExec
GetTickCount
GetSystemDirectoryA
GetFileAttributesExA
CreateFileA
SetFileTime
DeleteFileA

Sections

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 484KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ