a2c321ef88da41d69d96980b9dcd5064 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2c321ef88da41d69d96980b9dcd5064
Size

22KB
MD5

a2c321ef88da41d69d96980b9dcd5064
SHA1

a80f99075252fbb90e6438803932b87345ff0536
SHA256

73f8050e0ca1c37d05f27d971689c30998b5451a4150db1e2cdc41984f11d37e
SHA512

f2780c7434d5520dc2b4ede83602ea2ddc585d3bb3671ccd06d0c38f155e8549fae166fb76eab0651f1da2fbe4bb3d646af40ab99caee121b9680fcc283c4516
SSDEEP

192:4m/sfrYRGov7jmMynQPqx1sZzXvcRLpabapZhk7sdl/qummHi3rJbVzsF:4msTSvnmMl8azvRq8sjmmHKrJb2F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2c321ef88da41d69d96980b9dcd5064

Files

a2c321ef88da41d69d96980b9dcd5064
.exe windows:64731 windows x86 arch:x86

dcf5a3da5e5aa9efd4bbd96a5abd1e83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExA
GetModuleHandleA
VirtualFree
ExitProcess
LoadLibraryA
VirtualAlloc
LocalAlloc
LoadLibraryA

gdi32

GetDeviceCaps
GetDeviceCaps
LineTo
GetTextMetricsW
CreateCompatibleDC
PatBlt
SetBkColor
ExtTextOutW
SetTextColor

user32

DestroyIcon
IsIconic
GetWindowRect
InvalidateRect
BeginPaint
ReleaseDC
SendMessageW
SetWindowPos

advapi32

RegCreateKeyExW
OpenThreadToken
RegQueryValueExW
RegCreateKeyExW
OpenThreadToken
RegCreateKeyExA
RegQueryValueExA
SetSecurityDescriptorDacl
InitializeAcl

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ