2be9071189db0d94f31fa6129c36fb91 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2be9071189db0d94f31fa6129c36fb91
Size

4.9MB
MD5

2be9071189db0d94f31fa6129c36fb91
SHA1

cf75bf5638a9e4333e8673860d9201139527c139
SHA256

e6d84fcb4e2fef4eafc736688fb2ca03ce10e47fcb4a523b2eab356cdb6b509a
SHA512

1f3ab8584291d638b3567369a48b07406179e96b3f41c044dad23291a748d67c6222e64e0326e6bb157065560b0bb7eedb41373be1a0c43cf28cb92581331996
SSDEEP

98304:JomSR8nX9QBz2C1fo9b4ChfvAJZiZoRuZ8v9f0qeAvn1m3CI:Jol8tQhdf04ChHAJEaQKfM6m3CI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2be9071189db0d94f31fa6129c36fb91

Files

2be9071189db0d94f31fa6129c36fb91
.exe windows:4 windows x86 arch:x86

c13c72fa1e908e738853535529fd4b78

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

CommandLineToArgvW

shlwapi

StrStrW

kernel32

lstrcmpiW
GetCommandLineW
CloseHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
CopyFileW
DeleteFileW
GetLastError
EnumResourceNamesW
LocalFree
lstrlenW
GetModuleFileNameW
RemoveDirectoryW
CreateDirectoryW
GetLongPathNameW
GetTempFileNameW
GetTempPathW
ExitProcess
GetModuleHandleW
FindResourceW
SizeofResource
WriteFile
CreateFileW
LockResource
LoadResource
lstrcatW

advapi32

RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23.3MB - Virtual size: 23.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ