2d748ab1ca069fdbf7a6cf33824a5629 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d748ab1ca069fdbf7a6cf33824a5629
Size

408KB
MD5

2d748ab1ca069fdbf7a6cf33824a5629
SHA1

e7d605aed89906a4eb9757414dbccf0ffde1e71a
SHA256

863c749cdac606cdd6d86150810c7970f45ffe2e5dc48605606bcbf28f6b5f0b
SHA512

7d7e274e8e3484669e2e9eb7b823e2fa0740164717ec46240cbe13c575686bb542e5057752c3ac6a0c5fdfc4daeeefb91cd74ed83488f514c983c86205022bb2
SSDEEP

12288:WVT9u1KnfeUFWc0rSbZuhMXUKlH9rWjqFiFMEavaTW:WiKWUrIWR9lH9rWjZFMEaX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d748ab1ca069fdbf7a6cf33824a5629

Files

2d748ab1ca069fdbf7a6cf33824a5629
.exe windows:41934 windows x86 arch:x86

69ebe6f5cbfc34104c51380a6e8ebf73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
VirtualAlloc
LoadLibraryExW
ExitProcess
HeapFree
GetCommandLineA

user32

ScreenToClient
LoadImageW
LoadImageW
CreateWindowExW
LoadStringW
ReleaseCapture
GetSystemMetrics

gdi32

CreateSolidBrush
ExtTextOutW
SetBkMode
GetTextMetricsW
PatBlt
CreateFontIndirectW
CreateSolidBrush
GetObjectW

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 388KB - Virtual size: 964KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ