c2b28ed53610478348a02c49b3e32212 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2b28ed53610478348a02c49b3e32212
Size

103KB
MD5

c2b28ed53610478348a02c49b3e32212
SHA1

d74417b836c02f3cf200dd438c841ef1fce4c454
SHA256

e84640a16c5b66a707d5a001bebc85d2edb609f6001c1af2eaf7001f3ee403a3
SHA512

71a40cf5ad02559ac81f3bf1021983a53de2aac9ce4bc2cf830d2e5a7d03353613a1cba8d3ed8cd60840a9810287c0df282f07ffc8f853e2b68ba2bcb8d7c9dd
SSDEEP

3072:d8ske5Q7CVzYkj4cKZkEVn8OndQTopNP:d8C5/mks5dhJuTo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2b28ed53610478348a02c49b3e32212

Files

c2b28ed53610478348a02c49b3e32212
.exe windows:4 windows x86 arch:x86

2493bdaae0b3ae179055d05adf7ebaa0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
HeapAlloc
GetCalendarInfoW
SystemTimeToFileTime
HeapFree
GetSystemTime
CloseHandle
CreateFileW
GetStdHandle
HeapReAlloc
EnumResourceNamesA
FindFirstFileW
HeapSize
GetLocaleInfoA
HeapDestroy
GetThreadLocale
LoadLibraryExW
LoadLibraryW
GetProcessHeap
lstrcpynW

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

oleacc

LresultFromObject
CreateStdAccessibleObject

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ