c2749d1f61feb08c85ea5a20e6ff166b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2749d1f61feb08c85ea5a20e6ff166b
Size

319KB
MD5

c2749d1f61feb08c85ea5a20e6ff166b
SHA1

aeb371960984c834707ee1f14522d52b969e2e29
SHA256

a540928c424f04fc9b277af5ccc7794668e7efa5feb7a2fbc51b8202477bfcf9
SHA512

19def5a78bd716e7522b2c0c585d97c22e4d41b192ed182d30ab6060af3df27f733553f2364390a21672162f6219311138107521cbb99bf4a461a03e465db612
SSDEEP

6144:QxBCSjXfuH5AiQSfRmlCZVuDZ9IrY3kENV8ddkfNNApsFu:QxBfXfA2SslByrepo7kfNm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2749d1f61feb08c85ea5a20e6ff166b

Files

c2749d1f61feb08c85ea5a20e6ff166b
.exe windows:4 windows x86 arch:x86

14149f2800333879aca31bb745b26b91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineW
HeapAlloc
GetProcessHeap
GetCurrencyFormatA
HeapReAlloc
HeapFree
IsValidLocale
GlobalGetAtomNameW
GlobalDeleteAtom
SystemTimeToTzSpecificLocalTime
RaiseException
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetStringTypeExW
MulDiv
Sleep
GetTickCount
GetCurrentThreadId
GetVersionExA
GetUserDefaultLCID
GetCurrentProcessId

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
OleLoadPictureEx
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

user32

GetKeyState
EnableWindow
CharLowerA

msimg32

TransparentBlt

Sections

.text
Size: 200KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE