2ad32e0be68fa593a312282fe080bc0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ad32e0be68fa593a312282fe080bc0a
Size

420KB
MD5

2ad32e0be68fa593a312282fe080bc0a
SHA1

934d38a2951ac561b5e7334b0119c46dd0986d3c
SHA256

d0b64ec037b25fb3b91502f9a46209d855e113b26e465759e01c6e97daf5a049
SHA512

cb1e568e97248987d15cacd93f2a144dd4bc47f8e0519aa95f20e9b72e09798484b825c4f756ace7f15dda64805367f52f0ce5a21bfad6c5f933df3720d6c86f
SSDEEP

6144:fAv+oI9QsrI0Um/d5cih8NckdSAK//px9T8E/S69DMNmelX3GbQH0uy7KmFaU+4W:f/oKUPm1ESAwb/XDMFhsQH0L1Fz+4+L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ad32e0be68fa593a312282fe080bc0a

Files

2ad32e0be68fa593a312282fe080bc0a
.exe windows:4 windows x86 arch:x86

6ad329c623f194586a5ef71b7dd4feee

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CreateFileA
LoadLibraryA
LCMapStringA
GetCurrentProcess
CloseHandle
ExitProcess

user32

CloseWindow
SetWindowLongA
CreateWindowExA
CharLowerBuffA
wsprintfA

advapi32

RegSetValueA
RegEnumKeyA
RegEnumValueA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyA
RegQueryValueA
RegDeleteValueA
RegCloseKey

Sections

.text
Size: 378KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 164KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ