c2eecf3a4f2b0ddfbe87779d83d84fa4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2eecf3a4f2b0ddfbe87779d83d84fa4
Size

484KB
MD5

c2eecf3a4f2b0ddfbe87779d83d84fa4
SHA1

ee843fa28b12c04a9cb2234ffdfedc42271796d8
SHA256

936c290686d4a2704c9a7088dea1d0f7d7d9cf5e9f22ce35c86fd6960d031e64
SHA512

f308c46fbcfd49f9e3aaf1a149733504aea12a0ae2633651606ae8c80597f5036993fbbbb0a655947b34a4e49935a957beab4c6770fb984c966706767b8f53c4
SSDEEP

12288:H2lDHX9fbSNXhA5T/oSyq5SPYDSXlnLA/KOQzw9AO:H2lDHRbWXhgTQhq5SPajsO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2eecf3a4f2b0ddfbe87779d83d84fa4

Files

c2eecf3a4f2b0ddfbe87779d83d84fa4
.exe windows:4 windows x86 arch:x86

b6f0426fe8739ff3c89461970a922375

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerW
GetLastError
GlobalFree

user32

InvalidateRect
GetCapture
GetShellWindow

ntdll

RtlDnsHostNameToComputerName

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE