c2adbf4256249e8f6b9c3dc63bd6fd11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2adbf4256249e8f6b9c3dc63bd6fd11
Size

9KB
MD5

c2adbf4256249e8f6b9c3dc63bd6fd11
SHA1

160c5360ebdb07fd165f085f376eed063fb09735
SHA256

d4760cd07facc4984584d0bed594cd0021182b3cee7c72d2356b0fe27476c890
SHA512

c714e6bb4ceb7b1575e0dbc17bd6d1cec215b3927b77b11d4e1a92959b65f8dcf9950a9c212bf36ce9125dc9387b684bf930a38394b79d2564a1f4bad9302223
SSDEEP

192:V0H0G6wUqG9oyV7SM4o4feeEEZpaHhfZrr2:VqxjUqG9n7TweUpG1k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2adbf4256249e8f6b9c3dc63bd6fd11

Files

c2adbf4256249e8f6b9c3dc63bd6fd11
.exe windows:4 windows x86 arch:x86

96b2e968c8d942b1c476ffc19880a760

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strlen
_strlwr
strcpy
strcat
strcmp

kernel32

HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap

user32

LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA

shlwapi

StrToIntA

Sections

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ