2a97da2cad52bfd894ef73d2dba988ae | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a97da2cad52bfd894ef73d2dba988ae
Size

76KB
MD5

2a97da2cad52bfd894ef73d2dba988ae
SHA1

2437d3ed3f8e57e2b333855d71fd6d6767b9b214
SHA256

726947a7934d9158c34b7b717040c7d24c3bb36c4630c9cefeba2d9ca7d692de
SHA512

e7bb66eb799c25812c2b6c9affd280952c8e431d50c114652450f6ba158e01e8ea172fd6f1920426fcf33762e1e067807f8e7814957fa28eba6f659a8f40d25e
SSDEEP

1536:Fl4hm3Uq8Kl3IclX+vLtJvFDlv18wqFglQ2KZ/jXEHvDZH6EVNygxF:T4hmeG3dl+DvFDlKwqP2KZ/jXIbTQgxF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a97da2cad52bfd894ef73d2dba988ae

Files

2a97da2cad52bfd894ef73d2dba988ae
.exe windows:4 windows x86 arch:x86

4f977dc05391b2e1564ced976830e16a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ExpandEnvironmentStringsA
GetLastError
DuplicateHandle
GetNumberFormatA
GetEnvironmentStringsW
CloseHandle
CreateMutexW
WaitForMultipleObjects
GetEnvironmentStrings
HeapFree
SetEnvironmentVariableA
lstrcat
LeaveCriticalSection
LocalHandle
FormatMessageW

gdi32

Chord
EnumFontsA
EngGradientFill
EngMultiByteToUnicodeN
SetTextColor
GdiConvertRegion
GetTextFaceA
Polygon
GetBitmapBits
DescribePixelFormat
UpdateColors

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 710B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ