2c2277eca44fce365b6acac810b2a0f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c2277eca44fce365b6acac810b2a0f0
Size

2.4MB
MD5

2c2277eca44fce365b6acac810b2a0f0
SHA1

6a5fbb3fc2837896c367e0c0ed9f90e0f86cb158
SHA256

48b33448f9f7d83bd71c29d3f1eba3154fae5678e35c2e3a735e1b8012fb3d48
SHA512

c902760b31d0985a4e8dbb6da5116d2078f6aaaa5bbc819e498f0e1411d518b07f358b31b372309601c4821393e213ffad6581d8b152472e83427b1e1dda43f2
SSDEEP

49152:mQgo6n/jfIsoOdXyT6Sv6CB006TSJ2DNgyzdSSYhYMTdPxKaq08ESsuO:n6/rIH006m6CBd2DiyzdSaMZPx/luO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c2277eca44fce365b6acac810b2a0f0

Files

2c2277eca44fce365b6acac810b2a0f0
.exe windows:4 windows x86 arch:x86

43d84983dccd48e4c4d7426d4e451fd5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

wsock32

WSACleanup

Sections

CODE
Size: 2.4MB - Virtual size: 16.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE