2ca234c92843e2eead7068c5c6ce4623 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ca234c92843e2eead7068c5c6ce4623
Size

439KB
MD5

2ca234c92843e2eead7068c5c6ce4623
SHA1

ed6ed3a5168bc232dff221444ec13c028774c4ba
SHA256

ca2811eec60e3b215ce1f9c52999606553b6e5f99e39ae0ba99d10105640d5d7
SHA512

86f95d45fda5c70d12d053e2b0f2001762d5ce1cf15cd4173fa4a6d9293447f028e8b2db6c6e2aaca3bedcea17675ea2a75dbc89bdbfd3fd0c22ef36c2c0d9cb
SSDEEP

6144:pkUQqV6CGwFaVAXuABhcyE/zL7/SqE0TFTxlpk5O9d7CMzkxHpYnE0muN:pFQ9VA+fyqGLs65MdnkxJYEm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ca234c92843e2eead7068c5c6ce4623

Files

2ca234c92843e2eead7068c5c6ce4623
.exe windows:4 windows x86 arch:x86

dc31ac626e6e70f3a5ad7abcc1d698d1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID
CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

Sections

.text
Size: 20KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE