2d0d70e1c15da3e17b50132368a7a53f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d0d70e1c15da3e17b50132368a7a53f
Size

9KB
MD5

2d0d70e1c15da3e17b50132368a7a53f
SHA1

a4ab6bfbf86f635504770483799458431623a25d
SHA256

f2dae4e50b8afde7258e8314cf57f2aa271e3abb4f1071936a4d7e2d8a0d298a
SHA512

fe9ed9d2e8a4e326099e106b3206bf9c7ff19a28c664f359b1ce4576b4ccb7c1ffc08cf1dabf35f7ee8503ea872db1e7468540a757cddf0775f1fab9eb0e7e07
SSDEEP

192:OaNRaGEkfIUpauvwfuZleymFkGxMol2z17r+FMyi0PWIWl:/1fJauvTQ2OSi6yfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d0d70e1c15da3e17b50132368a7a53f

Files

2d0d70e1c15da3e17b50132368a7a53f
.exe windows:4 windows x86 arch:x86

6a3d9685e551324fb94dc22edcca9305

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
ExitProcess
FindResourceExA
GetLogicalDriveStringsA
GetVersionExA
IsSystemResumeAutomatic
OpenMutexA
TerminateProcess
TlsAlloc
VirtualFreeEx
_lcreat
lstrcatA

advapi32

CryptAcquireContextW
LogonUserA
LogonUserW
OpenServiceW
ReadEventLogW
RegEnumKeyW
SetNamedSecurityInfoExW

user32

CallMsgFilterW
GetAncestor
GetParent
IsCharAlphaW
RegisterTasklist
SetCursorPos
SetRectEmpty
SetWindowsHookExA
ShowCursor

shell32

CheckEscapesA
Control_RunDLLA
ExtractAssociatedIconExW
ExtractIconResInfoA
RealShellExecuteExW
SHFormatDrive
SHGetDiskFreeSpaceA
SHInvokePrinterCommandA
SHQueryRecycleBinA
SheShortenPathA

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE