2c9150e44cd16dea3242d0ecdd92dacd

General

Target

2c9150e44cd16dea3242d0ecdd92dacd
Size

376KB
MD5

2c9150e44cd16dea3242d0ecdd92dacd
SHA1

4e5f1dce6d7b8aac14018ecb4dacbd7a22fb8b60
SHA256

75f97f7d43cbd0e7a2e74e16a144f231f970553bb1f3ee213cfe39ec721c21f1
SHA512

35b1f2c8c28e50e82819d794672232f4152d76cb70104df8733d915658c5622d877c6c3beedb64efe08093960223ff447f0b3b6faddd1c58d2a8f2e2ccbd2dac
SSDEEP

6144:9gzwsMeOPMzB59nWns8dLatx2o7T54ROL8ntW69R5CLkJTqObaj/kse:6zws/zB58CNJsOL6t1RvuOmbe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c9150e44cd16dea3242d0ecdd92dacd

Files

2c9150e44cd16dea3242d0ecdd92dacd
.exe windows:5 windows x86 arch:x86

ef71d000e306cac8831c39f034a49fa6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
CreateFileW
DeleteCriticalSection
EnumDateFormatsExW
GetModuleHandleW
GlobalAlloc
GetUserDefaultLCID
CopyFileA
ExitThread
AddAtomW
FindAtomW
OpenConsoleW
DeactivateActCtx
GetTempPathW
TerminateProcess
GetConsoleCP
PurgeComm
GetCurrentProcess
CloseHandle
ClearCommBreak
VirtualAlloc
CreateMutexW
GetCurrentThreadId
SetUnhandledExceptionFilter
DeleteTimerQueue
OpenEventW
CancelTimerQueueTimer
GetSystemTimeAsFileTime
MoveFileA
GetConsoleNlsMode
GetCurrentProcessId
InterlockedExchange
LeaveCriticalSection
GetFileSize

msvcrt

_cabs
_chgsign
_close
_assert
_beep
_cgets
_access
_chdir
_atoi64

ws2_32

socket
listen
WSACleanup
accept
WSAStartup
WSALookupServiceNextA
closesocket
setsockopt
bind

rpcrt4

NDRcopy

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ef71d000e306cac8831c39f034a49fa6

Headers

File Characteristics

Imports

kernel32

msvcrt

ws2_32

rpcrt4

Sections

.text Size: 97KB - Virtual size: 96KB

.bss Size: 512B - Virtual size: 256B

.data Size: - Virtual size: 92KB

.rdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

.edata Size: 1024B - Virtual size: 576B

.text
Size: 97KB - Virtual size: 96KB

.bss
Size: 512B - Virtual size: 256B

.data
Size: - Virtual size: 92KB

.rdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB

.edata
Size: 1024B - Virtual size: 576B