2cab4484c39166121af2f1462aca8ce0

Sharing

Copy URL

Twitter E-mail

General

Target

2cab4484c39166121af2f1462aca8ce0
Size

231KB
MD5

2cab4484c39166121af2f1462aca8ce0
SHA1

62c61aedab62a381e42045d28cec34133897862c
SHA256

c2651eb6b789a770a9d1369b7b687864bcab986b1fdc2e7ee208eb458bddd4f7
SHA512

7aeeec8e70760ec64754da44ae0f981cd012faa11bb5d814905bd12e67607fc90bd2e541a4d946e8431b5f57ac681fe5ceca29c1dac1f444aa1b1293efad3b04
SSDEEP

6144:nDYBMQj84J3h4G+DCiOo8Gx+VFF87Ei3i:nVSVUCiOo9xK87Eki

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cab4484c39166121af2f1462aca8ce0

Files

2cab4484c39166121af2f1462aca8ce0
.dll windows:4 windows x86 arch:x86

cc52f6349519b051364c3b61ef3c6f0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetCommandLineA
LoadLibraryExA
LocalAlloc
VirtualAlloc
ExitThread
VirtualAllocEx
GetProcAddress
ExitProcess
GetVersionExA
GetModuleHandleA
IsBadHugeReadPtr
GetCommandLineW
GetLastError

user32

ShowScrollBar
GetCapture
FrameRect

advapi32

RegLoadKeyA
RegDeleteKeyA

gdi32

CreateCompatibleBitmap
CreateDIBSection
SetPixel
CreatePenIndirect

Sections

CODE
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 185KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES48
Size: 1024B - Virtual size: 742B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES79
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES45
Size: 1KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES01
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RES74
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES84
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES53
Size: 512B - Virtual size: 133B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RES39
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cc52f6349519b051364c3b61ef3c6f0f

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

Sections

CODE Size: 25KB - Virtual size: 24KB

DATA Size: 185KB - Virtual size: 184KB

RES48 Size: 1024B - Virtual size: 742B

RES79 Size: 1KB - Virtual size: 1KB

RES45 Size: 1KB - Virtual size: 89KB

RES01 Size: 2KB - Virtual size: 1KB

RES74 Size: 2KB - Virtual size: 1KB

RES84 Size: 1KB - Virtual size: 1KB

RES53 Size: 512B - Virtual size: 133B

RES39 Size: 1KB - Virtual size: 1KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 512B - Virtual size: 396B

CODE
Size: 25KB - Virtual size: 24KB

DATA
Size: 185KB - Virtual size: 184KB

RES48
Size: 1024B - Virtual size: 742B

RES79
Size: 1KB - Virtual size: 1KB

RES45
Size: 1KB - Virtual size: 89KB

RES01
Size: 2KB - Virtual size: 1KB

RES74
Size: 2KB - Virtual size: 1KB

RES84
Size: 1KB - Virtual size: 1KB

RES53
Size: 512B - Virtual size: 133B

RES39
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 512B - Virtual size: 396B