c2a865802a96f54dc8eed392bb3d6553 | Triage

Sharing

General

Target

c2a865802a96f54dc8eed392bb3d6553
Size

668KB
MD5

c2a865802a96f54dc8eed392bb3d6553
SHA1

91ce2347f463f859c15197dbeb5397fd3b698301
SHA256

c5b1662a3a2375fd65f40d8494f57b3f35382ee43ee61937e52d5acb4b3094c2
SHA512

1c18786e74156b9049827beceac805f761df9035aed1ec01803f927fcc63debbfe4362563db79ee086ee739229e5686c0a944125322b184ed62cd788db0e444a
SSDEEP

12288:wejttGEcXBQrfVugH89lSikEPG5AFhdIQZbpUwR:wejt0WfHmlhYcfVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2a865802a96f54dc8eed392bb3d6553

Files

c2a865802a96f54dc8eed392bb3d6553
.exe windows:5 windows x86 arch:x86

97551f5d6e89d42eb8410a80f46d1c8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32 kernel32

GetVersion ��

Sections

.text
Size: 100KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 516KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ