2cc305624106f345bc0e7de502a38eab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cc305624106f345bc0e7de502a38eab
Size

54KB
MD5

2cc305624106f345bc0e7de502a38eab
SHA1

b5e200d7a2ce7584695e09bb2a243b661d271134
SHA256

dbdaed8db5fee1059a260263122f0771becfac6c6e45103faffb5bded9744d37
SHA512

b6a5daec5a01109d8aa6ebbd21b48196726e8ac4fb333315eb58d3fe5db484ccea40ac0418a46e8c75d7cf615eeecc3cc233f5aa95b8ba439c64db5b49441e35
SSDEEP

1536:hjB6PUj0m2YN5thi9rz2SRRwv3avoKgX3OU:VByN5rz2pahgX3t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cc305624106f345bc0e7de502a38eab

Files

2cc305624106f345bc0e7de502a38eab
.exe windows:4 windows x86 arch:x86

c8d2d9f672786803dcd611ea74090ebd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

InvertRgn
PolyPatBlt
RectVisible
CreateRectRgn

msvcrt

__p__wpgmptr
_copysign
__p__tzname
_mbsnicmp
_dup
_getws
_inp

kernel32

GetCurrentProcessId
GetThreadLocale
CreateEventW
GetCommConfig
LocalAlloc
LocalHandle

Sections

.text
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE