2c40efd653a0446bc42b5f5e6ede8dcc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c40efd653a0446bc42b5f5e6ede8dcc
Size

28KB
MD5

2c40efd653a0446bc42b5f5e6ede8dcc
SHA1

d386f88f04c9524ddfc6adc083f8274071bf76e8
SHA256

04d21b155516a7d8e5ad0a6e63130b71d0e85e51efdf0e6afafdbb980b7ef57a
SHA512

e01f98206b9631c6141ceef415f9310051a613245d48909511636fd4bbf36242dd3f72aca1f485471037cb393c213e778d6f83f5241f9c00033926938378ea0f
SSDEEP

768:cYBNRzpgpdWZP4BVCI2xA3n95JIgqgVpYw2+:cMzSSMVCI2xA3n90tgpYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c40efd653a0446bc42b5f5e6ede8dcc

Files

2c40efd653a0446bc42b5f5e6ede8dcc
.exe windows:4 windows x86 arch:x86

331e29891373ee4f9993225cc054e555

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
CreateFileA
CreateMutexA
OpenMutexA
GetFileSize
ReadFile
GetModuleFileNameA
CloseHandle
GetStartupInfoA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyA

msvcrt

realloc
memset
free
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ