2ad845234435d8cf8cff709d63897071 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ad845234435d8cf8cff709d63897071
Size

41KB
MD5

2ad845234435d8cf8cff709d63897071
SHA1

fdae3bc641132c3845cdfdc2374720f60458dd87
SHA256

7254b8a1e7af93a4cd97d88c44f29bec8332d7ae62561d2b9f3dcea538e73b0f
SHA512

dbdd0b5d4aaeb0e18235cfd31d9d063e9949e88d25b10801b53bc5940f72bce04261eb836339b75e38ee6fd25a60978f46922846b4e9d4887789c9d70981bd9e
SSDEEP

768:TBljZfbVwxsBAEeqropjgaan6MlKs0+os:TBlnIqNeqroClKsx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ad845234435d8cf8cff709d63897071

Files

2ad845234435d8cf8cff709d63897071
.exe windows:5 windows x86 arch:x86

9a18079b97f927abbfd6e966d7cae491

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
FindFirstFileW
FindClose
FindFirstFileA
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
GetSystemTimeAsFileTime
WideCharToMultiByte
SetEndOfFile
LocalReAlloc
GetFileInformationByHandle
HeapAlloc
HeapFree
GetTimeFormatW
VirtualAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
GetModuleHandleA
SetLastError
GetCurrentThreadId

user32

EnableMenuItem
GetMenuState

advapi32

RegOpenKeyA

oleaut32

LoadTypeLi

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 498B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ