2c08a9f5bc4d886d0db8c2be81f12291 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c08a9f5bc4d886d0db8c2be81f12291
Size

170KB
MD5

2c08a9f5bc4d886d0db8c2be81f12291
SHA1

35f959c3aa1bd2a1c9b20827f98a5406c7b17e31
SHA256

e6263bed8da1e9051f4d080e89a5da6e2ade8af3d0f0e31ea87339ee2ae9969b
SHA512

a7b4ab10580cd82222384a3a1f91354ac0497c2381687f66cb6ccc94231f5f42a42d8d30ce576e1e83eb63444c54905253d3b0ceb483fac81cd1e791edc3b510
SSDEEP

3072:djBdI483wOGVpF/tlJL0to1L812YmAiULI8YF47RRtHfXu2ISt:9BdI4QlgF/tLL0tUsvi4Y+7RDfXz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c08a9f5bc4d886d0db8c2be81f12291

Files

2c08a9f5bc4d886d0db8c2be81f12291
.exe windows:4 windows x86 arch:x86

0e0505efe6cbc8b6354249aa721b2be7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

oleacc

LresultFromObject

user32

GetDC
GetParent
CreateWindowExW
GetWindowInfo
RegisterClassExW
MessageBoxW
LoadCursorW
EndDialog

kernel32

lstrcpynW
TlsGetValue
CheckRemoteDebuggerPresent
HeapCreate
EnumResourceTypesW
InitializeCriticalSection
TlsFree
GetStartupInfoA
TlsAlloc
GetFileType

Sections

.text
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ