2ac2a3207c2606de43c8dd09950eb9a1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ac2a3207c2606de43c8dd09950eb9a1
Size

76KB
MD5

2ac2a3207c2606de43c8dd09950eb9a1
SHA1

52997966c9d7609cabb467966576702cd457666a
SHA256

58e6655d682f0050a8720f4f1cae29201d326760f70b65367eeda0be5acbb598
SHA512

3089e16e42fbc4bd5cce80c86a49ade6e16d2c01073e7887c9ce74868eb297b91a166100dcf2db2b7e1516f1cf745631c04e52e2037502d9f3fefb970968ac57
SSDEEP

1536:zpKijmcOkSU/QGZZGAgYw3gMoVXMNbZPtAEgokl4PJDCdtANQpjVrs2ryrd1vUQ0:x5BKNbTAEgzeJDXNQHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ac2a3207c2606de43c8dd09950eb9a1

Files

2ac2a3207c2606de43c8dd09950eb9a1
.exe windows:4 windows x86 arch:x86

5f71becbb37cc2321ad445369a30979f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
SetWaitableTimer
GetFileTime
IsBadWritePtr
SignalObjectAndWait
GetOverlappedResult
SetPriorityClass
ExpungeConsoleCommandHistoryA
GlobalFindAtomA
GetCommMask
OpenFileMappingA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE