2c276866588a9169c3b6e87bf1a8e131 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c276866588a9169c3b6e87bf1a8e131
Size

192KB
MD5

2c276866588a9169c3b6e87bf1a8e131
SHA1

ea82f7bd184b8fbf6f72aecd81801d5f23e2d6db
SHA256

e62f760b1dc491ee79bb234af6434e7e8af2a781caa0f272275e2462ebe79d9e
SHA512

5b15dd127b6d2ba54d4549576d7946db5db10a072b34a3db7e24f6ca5dd3f0d2198394bb5212d44779694e650b7bb4379c00a60912227492e2b6b49c000c6049
SSDEEP

3072:eP9t3x6W9UWeAwNffwveMIBKAeDEdeAyDoj9hqGBJIGDHM8aGXR6RxoGnAn+g+0X:gtF3eAwNfoP9JdAajGXo8dXR6Bpg5Oh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c276866588a9169c3b6e87bf1a8e131

Files

2c276866588a9169c3b6e87bf1a8e131
.exe windows:4 windows x86 arch:x86

5e7ec89d69b11ee82e25b8c8aecd2ca7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
lstrcpyA
InterlockedExchange
ExitProcess
GetWindowsDirectoryA
HeapSize
GetFileInformationByHandle
GetCommandLineA
GetCurrentProcessId
GetCurrentThread
WriteConsoleInputA
SetConsolePalette
IsDebuggerPresent
GetSystemRegistryQuota
GetPrivateProfileStructA
CreateWaitableTimerA
GetCommandLineA
DeviceIoControl
GetProcessHandleCount
CancelTimerQueueTimer
VirtualAlloc
GetCommandLineA
DeviceIoControl
GetEnvironmentVariableA
CreateEventA
ReleaseSemaphore
BeginUpdateResourceA
WriteConsoleOutputA

ws2_32

send

Sections

.itext
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 160KB - Virtual size: 815KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ