2cb9a132f81d824191388a5eb4a9a651 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cb9a132f81d824191388a5eb4a9a651
Size

155KB
MD5

2cb9a132f81d824191388a5eb4a9a651
SHA1

5612a1479d198f02bcc57a1de712422f7d1ccb47
SHA256

5b11f738f6c5e0eaeec201d1c973c9d46af81bdeaba8c1db0d59bc108b05f7b1
SHA512

07aee1791b28db99deb63d79d8b83320838bb2afb2a9bd7320163e30a95eaaf2619e289444e9c9c833e1fb80e290c69f0513c1d95d511bb9ac0a2ed21a72740d
SSDEEP

3072:ahCy5jK4/zTTLtN6bPAWeXnDp4pionadU6vB8VL9lR7C/MolO2D9xGlfFrdN:ahCkrzTQPfeXnDCPnIUcBcL9lR7h2D9c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cb9a132f81d824191388a5eb4a9a651

Files

2cb9a132f81d824191388a5eb4a9a651
.exe windows:4 windows x86 arch:x86

9c2fe897ff9207ddcc74ee35f8b95f8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
FindWindowA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
AddAtomA

msvcrt

__getmainargs

urlmon

URLDownloadToFileA

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE