2c6a2dd2fb89fea3ead1372deb7953b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6a2dd2fb89fea3ead1372deb7953b1
Size

32KB
MD5

2c6a2dd2fb89fea3ead1372deb7953b1
SHA1

ff6d7c24476afa6c94a3b46b6e3fd304068445fa
SHA256

bd850548a1c391059cd89722f95fcae0591b1378fd7bae73d9469fe566db2533
SHA512

3395784550b4828ec8074a57d15036f0b996afa8a1a6b8f54731d5b15c4722f1aa4088aa3665fdb6ecc536fdec62dd397f86d69207f02b2878fab91b6a35bd59
SSDEEP

768:hS4yVxm0cKMsdM685ocWfHRq9C1JC56Z6:hsD3dZ0kfHRq9Soa6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6a2dd2fb89fea3ead1372deb7953b1

Files

2c6a2dd2fb89fea3ead1372deb7953b1
.exe windows:4 windows x86 arch:x86

55bc91554552b32296632f5a6a0ba22d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumDesktopsW
DestroyIcon
GetKeyboardLayoutNameA
SetWindowsHookW

kernel32

FindVolumeClose
VirtualProtect
GetLastError
CreateWaitableTimerA

gdi32

SetPolyFillMode
EngAlphaBlend
EngFillPath

comdlg32

FindTextW

Sections

.text
Size: 4KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE