2c31d5ff0f4d3e2f3aec435c18e28c12 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c31d5ff0f4d3e2f3aec435c18e28c12
Size

148KB
MD5

2c31d5ff0f4d3e2f3aec435c18e28c12
SHA1

0b6d2c0b6e793c09da9d9b58e74aba3673162ed1
SHA256

ca88302ca339777bb16b0ac6272f345af5c0af25b48570a78e0dda52abd943a5
SHA512

a75461755460ece08aa78030ac591621a761b43979d462e271eba73492387fde22980f13661cf01a2878fb4c78fc16fff7f6a6d563aba18230661741c0d2cc76
SSDEEP

3072:n5/9NtF29j0axMrJ22Q1R311/eBruD+tohdKMZK:nB9NtF29jzxD31lepE+tohdBZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c31d5ff0f4d3e2f3aec435c18e28c12

Files

2c31d5ff0f4d3e2f3aec435c18e28c12
.exe windows:4 windows x86 arch:x86

78927757087777bfa27797b990933492

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLanguageGroupsW
FreeConsole
ConvertDefaultLocale
SetFileApisToANSI
CreateFiberEx
RemoveDirectoryW
SetVolumeMountPointW
EnumResourceTypesW
CreateTimerQueueTimer
ProcessIdToSessionId
BackupRead
FreeUserPhysicalPages
OpenSemaphoreA
GetSystemPowerStatus
BuildCommDCBAndTimeoutsW
GetCommProperties
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ