2d54ed229ef41f11f6b71e3a3d17bdd5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d54ed229ef41f11f6b71e3a3d17bdd5
Size

424KB
MD5

2d54ed229ef41f11f6b71e3a3d17bdd5
SHA1

aa5f1946dd6a25b1d906e1332f43794afca8f24c
SHA256

73f842d86aa42bf1aade38605087ba2d12f61e724a4cb3798d88ba160df22f0e
SHA512

a8a8276b13c76eb9bd3a544ea50ed0dddb9b747a4b1438f48902f4457da7716b7a61927ab1895731d837b01f439cf077e76698372f56bfc0b9f4bf240a689b7c
SSDEEP

12288:dW6h5mf3I2iwDzgn3Y5h6sriJdieUdCDw5zVyXb3G0lR:TXa3Kw/gnShkieUMwyXbW0lR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d54ed229ef41f11f6b71e3a3d17bdd5

Files

2d54ed229ef41f11f6b71e3a3d17bdd5
.exe windows:4 windows x86 arch:x86

9c4d65edfad39170e8ef92f1dfb0170e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
RaiseException
VirtualProtect
HeapCreate
ReleaseMutex
GetStdHandle
SetEvent
GlobalFree
GetLastError
GetLocaleInfoA
SetErrorMode
ResetEvent
GetACP
FindFirstFileExA
GetLogicalDrives
InterlockedExchange
GetCommandLineA
CloseHandle
LoadLibraryExA
Sleep
EnterCriticalSection

user32

ReleaseDC
BeginPaint
FlashWindowEx
DrawTextA
GetCursorPos
ValidateRect
wsprintfA
SetForegroundWindow
GetWindow
FillRect
GetClassNameA
GetFocus
IsIconic
ShowWindow
GetParent
GetWindowTextA
FrameRect
GetActiveWindow
EndPaint

dsound

DirectSoundCaptureCreate
DirectSoundEnumerateA
DllGetClassObject
GetDeviceID
DirectSoundCreate

clbcatq

CoRegCleanup

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ