c2b709cc5315151d740166047f6a83ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2b709cc5315151d740166047f6a83ce
Size

1.3MB
MD5

c2b709cc5315151d740166047f6a83ce
SHA1

47afce1ebc3a06140f0d55859a3f774c0855e198
SHA256

cfea8cf8fdd49cd7fb66ccfa3825d6aa56c4201cdf0baf1c218f03ca562a48c4
SHA512

fd971bd41bab6c599133c04dd08aa6cf01a4043378dc9a8a61da45d0b5c700bea0b39b54f6521a8d58565dd45de64a5127c86e38c6a5d5c7a69919656d645c16
SSDEEP

24576:SC4V7AzIEvZ7DwUg8aMmShaL1XBqolkFue5Sg0q4vj/2xkoyJZ65u4A:SCuA/Vg8aohaL1XBqolkFH0q4vj/6yz/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2b709cc5315151d740166047f6a83ce

Files

c2b709cc5315151d740166047f6a83ce
.exe windows:5 windows x86 arch:x86

acd351cd6dd730de16da8c782c0bfad3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExW

user32

LoadStringW

msimg32

AlphaBlend

gdi32

UnrealizeObject

version

VerQueryValueW

shfolder

SHGetFolderPathW

ole32

OleUninitialize

comctl32

InitializeFlatSB

winspool.drv

OpenPrinterW

shell32

ShellExecuteW

wininet

InternetGetConnectedState

winmm

timeGetTime

Sections

.text
Size: 1.1MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 254KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE