c2dcd81e1d2802dfe9a7281287c7eb41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2dcd81e1d2802dfe9a7281287c7eb41
Size

76KB
MD5

c2dcd81e1d2802dfe9a7281287c7eb41
SHA1

75cd6bbcf9388e81a70f37ea05385e1948255470
SHA256

c450d7a4352a70cbb5c0345d3b537ec1e490fca588a2e29842f0918abd399770
SHA512

7d588d0a7c27bd6738f2b66f05a924a5b82182a85370a9af4399b44c4dadcb0da0c022dcf7576084ccd5d8dd9d1986c6e8678dae164e065534ff182bc0c6c856
SSDEEP

1536:wbDA2yZHoz5OBV0XDtZyb4NImG4jUSiBETrP3AuV1xVCpjVrs2ryrd1vUQuq6:wY2gIz5OBV0XP2KImGPS7rxVCHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2dcd81e1d2802dfe9a7281287c7eb41

Files

c2dcd81e1d2802dfe9a7281287c7eb41
.exe windows:4 windows x86 arch:x86

4a8f959edfe39d42d0f101567822578a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualUnlock
GetConsoleCommandHistoryA
HeapReAlloc
GetSystemWow64DirectoryA
FindFirstVolumeMountPointA
EnumCalendarInfoW
DecodePointer
SetVDMCurrentDirectories
GetNumberFormatW
CancelIo
CopyFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE