2acc02eca400964c53e46f2f5af6a7b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2acc02eca400964c53e46f2f5af6a7b1
Size

24KB
MD5

2acc02eca400964c53e46f2f5af6a7b1
SHA1

ce6c70b80b9c5ec622c46b148911562049b04a9e
SHA256

146040769fe73acf73f8326d1c793c6f9fe18364da0b7d5ce4c537d6093c8e53
SHA512

79b0fee45c9e92d89f01cdc4e039b5965605c3ad934c1a9134e7cb4d2ccff5e80df0a774fdba7a99e4b1a58703287fc2c57a2b743fd950098e85009391950b7c
SSDEEP

192:qLHiZfEE46fXH95UM/vl3R8Np6Fd5Qgni5OzRlKSBRGqs2IXkjstUeFLSLCDX:Dz46f3LX5Q0i565ieuFVSe7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2acc02eca400964c53e46f2f5af6a7b1

Files

2acc02eca400964c53e46f2f5af6a7b1
.exe windows:4 windows x86 arch:x86

efbbd0cff350778b53fa3fa7a96d11ea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AddAtomA
AllocConsole
CloseHandle
CreateFileMappingW
CreateToolhelp32Snapshot
ExitProcess
FindAtomA
FreeConsole
FreeLibrary
GetAtomNameA
GetConsoleTitleA
GetLastError
GetProcAddress
LoadLibraryA
MapViewOfFile
Process32First
Process32Next
SetUnhandledExceptionFilter

msvcrt

_strcmpi
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
fflush
fprintf
free
malloc
memcpy
memset
printf
signal
strcat
strcpy
strlen

user32

FindWindowA
SendMessageW

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 944B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE