2cb09496c1709ae61e49ccd799e4b3ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cb09496c1709ae61e49ccd799e4b3ab
Size

20KB
MD5

2cb09496c1709ae61e49ccd799e4b3ab
SHA1

80d179ea6b7df6d3600930bf7bde7315cd256964
SHA256

7ea9cbb4bd7afa4c8128233257b6790b171a1090f47a71627185c7dd943d92d6
SHA512

3c50eef2c0a3284806d4e5ded7ef242ad4b40a2d8aedf5e4be6fc939c4f7f0678389d77e4504aa9bb05b51d812671ce6506db004f15acc5e977d61dbcf46ecbf
SSDEEP

96:khSOOp33DY/tKQhYlQEUvK4oynrZ6Ala4EsoQLD/uJnYoRUmkNK4+0:khHIzY/tKQhYES4oynrZ62aMNLbyeKW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cb09496c1709ae61e49ccd799e4b3ab

Files

2cb09496c1709ae61e49ccd799e4b3ab
.exe windows:4 windows x86 arch:x86

f2f21164966ba9e3fb96abbcc3bfb471

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
GetCommandLineA

shell32

ShellExecuteA

mfc42

ord1575
ord561
ord815

msvcrt

__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__p___initenv
_XcptFilter
_exit
_onexit
__dllonexit
exit

msvcp60

??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ