c2720f5cb2765f089e1cc9f9dc6b6bfd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2720f5cb2765f089e1cc9f9dc6b6bfd
Size

1.3MB
MD5

c2720f5cb2765f089e1cc9f9dc6b6bfd
SHA1

220072b89f8660b4157fd1d6061b2045f24228d6
SHA256

a3114b4b4f484989ee9aa957bb82301f4c76d3cac2a924fe8a8f058afa5a8c8e
SHA512

40731f16f1553832593caaa7aae2f990805c4214e231708fea86f0f738073d50ddb725dd0b713f35e1f89c2bfb3c57a490b7c623efae1d5cd62eb6ea3f5ba60c
SSDEEP

24576:T9jCneg5BCEZCxJ5C4wB9PRK+Z9U831oBEnzuKJnoCyiOSsXq6BDva3:T9j7gs5C4gzZf31oBEnznKCjYqUa3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2720f5cb2765f089e1cc9f9dc6b6bfd

Files

c2720f5cb2765f089e1cc9f9dc6b6bfd
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 1.1MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 16KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 115KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE