c2988a817ca335007920a3a32ca9b7b4 | Triage

Sharing

General

Target

c2988a817ca335007920a3a32ca9b7b4
Size

58KB
MD5

c2988a817ca335007920a3a32ca9b7b4
SHA1

fef174799c626e19c42ebfde5c421021c5061fd4
SHA256

5e51303159c5de56dcaad4e12ef913d57f85e69b8d35d1522a2de7d7d5135ab4
SHA512

32fa36e1bec10eb76019ffc19235d9effb5f99abf157c4caddfcd91707f91a96d2ea7f56fff0968dfb11595b28f8d2e9b9c87a77504833914a7bdfb652d71a4d
SSDEEP

1536:RgUPBqRlrcFq0Yc5u8sthTa2sA2H0/kc:RgUnq8E8stk1rUc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2988a817ca335007920a3a32ca9b7b4

Files

c2988a817ca335007920a3a32ca9b7b4
.exe windows:4 windows x86 arch:x86

69767e8baf07d02fe535007b24c15561

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
Sleep
WriteFile

user32

CopyRect
GetCursor
EndDialog

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 25B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 242B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ