2cd90162ded49c540c02bb509ff90fbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cd90162ded49c540c02bb509ff90fbb
Size

206KB
MD5

2cd90162ded49c540c02bb509ff90fbb
SHA1

6b318f13b4d043c723d9be74f0948481842ce324
SHA256

e4ff6729924f1f20f8842b90988ae320efc1bce08f8096a6437fa66f34395933
SHA512

6b011e362989d54e2e63bf9a47e0ab7f03b5106f34da9a25544ee3b0b352fbea3912395b1523336cdfb5a768c2f167d8ba6037df3e7dda96618b803855e79670
SSDEEP

3072:Hgd5X14/VWC13wRhGGr173O73qyo0+3NoJPrjSYnFnM7RJbnLnrBgmpxlz15elyc:HEf4so6J7+TqyA2tjS2lMznrBLb1IUi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cd90162ded49c540c02bb509ff90fbb

Files

2cd90162ded49c540c02bb509ff90fbb
.exe windows:4 windows x86 arch:x86

ed073e9ddc9650a065c1c0041b21ac2c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

GetHGlobalFromILockBytes
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID

kernel32

GetLocaleInfoA
SetProcessWorkingSetSize
GetCurrentProcessId
CreateProcessA
GetCurrentProcess
GetACP
lstrlenW
UnhandledExceptionFilter
IsDebuggerPresent
lstrlenA
EnumResourceTypesA
GetEnvironmentVariableA
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetModuleHandleA
SetUnhandledExceptionFilter
SetHandleCount
MultiByteToWideChar
RaiseException
LocalAlloc
InterlockedExchange
GetTickCount
WideCharToMultiByte
GetThreadLocale

Sections

.text
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ