c2ae0cf3b00c4a71afebabc1fb2f4269 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2ae0cf3b00c4a71afebabc1fb2f4269
Size

224KB
MD5

c2ae0cf3b00c4a71afebabc1fb2f4269
SHA1

fcdbe26dc567579d5fa63386fd31586d0654579e
SHA256

e45156987d6b3aa0837dcbbb9c66a84e310ddb8973225200c96e0256e16d6fba
SHA512

4cc1e65bc02060d4a2d88c00f9ed65d37c6e54942bd435271ae389659b49c0c28aec63352f852b2e8866724ee099b680ac3d8af70ac905f2f2dda6f131003097
SSDEEP

3072:LiZMHbuCXPO3Su+OicovtDD2m3AfKrPpIO1n6p6nNLTiRh3mFFFFVN78fS:L37aZiBDazfOPpIOh6oNLTiRhc38f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2ae0cf3b00c4a71afebabc1fb2f4269

Files

c2ae0cf3b00c4a71afebabc1fb2f4269
.exe windows:4 windows x86 arch:x86

897916d09b0590794776057f674cea49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
DeviceIoControl
GetConsoleAliasExesLengthW
MultiByteToWideChar
WriteConsoleOutputCharacterA
GetCommandLineA
VirtualAlloc
GetCommandLineA
SetComputerNameExA
HeapAlloc
SetCommMask
GetVolumePathNameA
GetSystemRegistryQuota
InterlockedExchange
Toolhelp32ReadProcessMemory
GetThreadTimes
GetLogicalDrives
FlushViewOfFile
ClearCommError
GetPrivateProfileSectionNamesW
ReleaseMutex
SetFilePointer
HeapFree
SetFileAttributesA
GetCommState
EnumSystemCodePagesA
EnumTimeFormatsA
ClearCommBreak
DisconnectNamedPipe

ws2_32

recv

Exports

Exports

Slqhvsfqqu
AddGdbtojd
Lmjjyowd
Yhbghyv
IsBvknhmopdoq
Vrffnpiwn

Sections

.itext
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 208KB - Virtual size: 852KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ