2ae1b3980e71fcc5e37094c2f561c434 | Triage

Sharing

General

Target

2ae1b3980e71fcc5e37094c2f561c434
Size

206KB
MD5

2ae1b3980e71fcc5e37094c2f561c434
SHA1

ceaf2cbddf40409a676e4a9fc0591b0a30aa039b
SHA256

a57ec96822fe67acb7bb01bd1a1ea90467e7da767d002598f7586b16be5c8c5d
SHA512

b63697b73b1b74c8c2fafc0b0aa13356e760d5cbd17a2aeaff36758289726ffd7abe4a1e71bd20c2bd82921638fb085b9e434174ad9bb69e8c94cea810e76e90
SSDEEP

6144:orPiUVPw2PtLd3BqnEG8YV9aKxKfmge1QMNAr:orPiU9rJSnaYV9aKR8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ae1b3980e71fcc5e37094c2f561c434

Files

2ae1b3980e71fcc5e37094c2f561c434
.exe windows:4 windows x86 arch:x86

58bc315907d66bd6874cde66e709755a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA

msvbvm60

_CIcos

Sections

.text
Size: 21KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE