2d35e1b09c59ecd4a4350fc66566d99b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d35e1b09c59ecd4a4350fc66566d99b
Size

397KB
MD5

2d35e1b09c59ecd4a4350fc66566d99b
SHA1

acac15a5834780b4103db8a7622dc0fd6ebdbc5a
SHA256

71541d6a4d1d6a3d613b59fd86286411aa6dd4ac7d3bbd629be07456f9146784
SHA512

fdc8a3e25a75c15592f22f1e16cb1672e3ca8d6020d76aa489a93ea3e0f89c54f0ecf457e4c073548fe876b1d6d7cf93ab40855f0bcb4565bdfca10c82d04ca9
SSDEEP

6144:bAdkqd2Ux0a+IUqRI0EFTMIJSzxT7hiLTTWGL1JP8/a+dNIaMhnDR/kXAGkkoZ+x:0kIh2al5EFIVxpiLGuPELM51/kX3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d35e1b09c59ecd4a4350fc66566d99b

Files

2d35e1b09c59ecd4a4350fc66566d99b
.exe windows:4 windows x86 arch:x86

a20dfc5c3d815a4670ef80afd2197fe6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetCommandLineA
GetModuleHandleA
GlobalAlloc
GlobalFree
lstrlenA
LocalAlloc
CreateEventA
GetStartupInfoA
GetVersionExA
CloseHandle
Sleep
GetTickCount
FreeLibrary

msvcrt

rand
_initterm
__p__commode
toupper
__p__fmode
memmove
exit
wcschr
_exit
_c_exit
_XcptFilter
wcstoul
__setusermatherr
_except_handler3
__getmainargs
_controlfp
_adjust_fdiv
__set_app_type
__CxxFrameHandler

gdi32

GetTextColor
GetStockObject
CreateCompatibleDC
SetPixel
CreateFontIndirectA
GetBkColor
PatBlt
GetDeviceCaps
BitBlt
GetPixel
SetROP2
CreateSolidBrush
SetBkMode

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 392KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ