c2a9db69c444692352dab2ddcd8a5f1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2a9db69c444692352dab2ddcd8a5f1c
Size

480KB
MD5

c2a9db69c444692352dab2ddcd8a5f1c
SHA1

62936aa19ddec102918c7919fef65bfbefec17d1
SHA256

689126ce4d66356b0cd90e0ee70f201328295ad2905cfb7064f86bcee016a344
SHA512

4139b3e031b0fe11e63f2b55a393b297857c3f9615b08d01eae317bdba5f174b53a98fc007dd86da24988b63e4a46ecf61328c336c96ef70f914d534edc40c2d
SSDEEP

12288:0TbCxVZ3v3vpXoy2VSovBrOX6+8wwOgkruN:aCxDfpN2VSo8XrMOgW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2a9db69c444692352dab2ddcd8a5f1c

Files

c2a9db69c444692352dab2ddcd8a5f1c
.exe windows:4 windows x86 arch:x86

c6324ba061879e6c4a96b33a62a8908c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwCreatePort
ZwCreateMailslotFile

shell32

SHDoDragDrop

oleaut32

VarI1FromI4

kernel32

GetProcessHeap
GetUserDefaultUILanguage

Sections

.text
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE