c2f5e298e241568e11da0da39a7df295 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2f5e298e241568e11da0da39a7df295
Size

363KB
MD5

c2f5e298e241568e11da0da39a7df295
SHA1

85b7735e6af5adc74637a5ee985d108958a5596a
SHA256

53c6461114a3581b2bea9dc4a8d659e0270869d7e59653cba9a0c6d994d81f0c
SHA512

1128e0bdaff18e7e065c4d680f1125269868f4e5c23de13e2c2cf82f3807634d017684ff3747917ed82c222f68a2a305b83977a8e1bf190146d9ac46afbb6fd6
SSDEEP

6144:r6pn0AlDpr+zF0Ey79xdaE0zlKT4SDv90hC9q7HiTddQv2X2Gv:mZAy9V0S4SDFdMav

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2f5e298e241568e11da0da39a7df295

Files

c2f5e298e241568e11da0da39a7df295
.exe windows:4 windows x86 arch:x86

135403adbf3da8db433941420c303e8b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetUserDefaultLangID
FindClose
FindFirstFileW
GetLocaleInfoA
GetVolumeInformationW
GetFullPathNameW
CreateFileW
SetErrorMode
GetVersionExW
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetStdHandle

msvcrt

_initterm
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_stricmp
exp
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_makepath
_wmakepath
wcscmp
wcscpy

msimg32

TransparentBlt

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ