2c0e55a18e91a748cdfb4e8216fb86e5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c0e55a18e91a748cdfb4e8216fb86e5
Size

1.1MB
MD5

2c0e55a18e91a748cdfb4e8216fb86e5
SHA1

b110d8f0816e3c83e9a41c9b427e03824c484583
SHA256

76b6f74770a0fc93e9215697e04cb3c090f186764d7d436056fa314873d86e45
SHA512

1f7fd6232c71002bb243e7311a92827bc7999d30ae83480c708f3e310a94275244aab2be1b2fb743e6ce1418bf8b4aea39d71ae3782031e32a72ed5edba8ad8c
SSDEEP

24576:HffF8PWWz7aq7vCj/ypm1mPtR8EL7l+/4+5pzvK10GX:FyWWzG2Cj/Am1aP8Wp+/3p215X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c0e55a18e91a748cdfb4e8216fb86e5

Files

2c0e55a18e91a748cdfb4e8216fb86e5
.exe windows:4 windows x86 arch:x86

c62249dcf92ad34e05c5107b294478c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetModuleHandleA
WriteFile
CloseHandle
CreateFileA
ExitProcess
GetFileSize
GetModuleFileNameA
GetTempPathA
GlobalAlloc
GlobalLock
ReadFile
RtlMoveMemory

Sections

.text
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ