c2e3ac7f81d3b9145a540a520ae375c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2e3ac7f81d3b9145a540a520ae375c5
Size

20KB
MD5

c2e3ac7f81d3b9145a540a520ae375c5
SHA1

3cb64925083abf4df42f55667d9f68f3ee3ec30e
SHA256

781401d74d2bee1dae03e720412d40b39a06ae10b12180737255f0f15bfb8dc3
SHA512

d4ba531234ebd5aa8ecb67e8f11ca47c10ea159b1480e930f66a0cc61d4364288eca2bbdc33daf8977a49a9e5a617c3c719cecb95efc53d02b21a2dabed05ce4
SSDEEP

96:80KI0Z9a4A9PqS8PeQlrbCnrp2eePDPf0iPd+7sWEhNYQOj:8NuPkWQFbCnrnqWwq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2e3ac7f81d3b9145a540a520ae375c5

Files

c2e3ac7f81d3b9145a540a520ae375c5
.exe windows:4 windows x86 arch:x86

216597b281849e646fdb1eedda283164

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
LoadStringA
wsprintfA
MessageBoxA
LoadCursorA
RegisterClassA
CreateWindowExA
DefWindowProcA
CharNextA
LoadIconA
SetClassLongA

kernel32

GetStartupInfoA
GetCommandLineA
GetLastError
SetErrorMode
LoadLibraryA
ord35
ord37
ord36
lstrcpyA
FreeLibrary
FormatMessageA
GetProcAddress
ExitProcess
GetModuleHandleA

shell32

ord122

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 694B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ