2d69af5abbfd6db98f55202e6bef1d6b1d866ad32e7080c4b79d76c1d65a36f0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d69af5abbfd6db98f55202e6bef1d6b1d866ad32e7080c4b79d76c1d65a36f0
Size

25KB
MD5

e8e39ea396c4bbe839f2017fce9cb440
SHA1

34f05f79f23c5d73054a4cf41dabc62547ca80dc
SHA256

2d69af5abbfd6db98f55202e6bef1d6b1d866ad32e7080c4b79d76c1d65a36f0
SHA512

70784e0f361bf0745e964b2d79837b097b17e25b3cdece1378400ae0d1a443d7381c80fe9961123d291f30efe9dd8c98efa659e1803dd21780f7901b2a4919dc
SSDEEP

384:GGjw95yGiZqhpTUohIo/U4nllHQCh1I6xpPsvb8pP:GGGyDqhpJ+o/U4nXQQ1iT8B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d69af5abbfd6db98f55202e6bef1d6b1d866ad32e7080c4b79d76c1d65a36f0

Files

2d69af5abbfd6db98f55202e6bef1d6b1d866ad32e7080c4b79d76c1d65a36f0
.exe windows:4 windows x86 arch:x86

f8d8aee08196483a265bcf1e1242daab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
GetWindowRect

kernel32

GetStartupInfoA
GetModuleFileNameA
CloseHandle
GetModuleHandleA
LoadLibraryA
HeapAlloc
GetProcessHeap

gdi32

GetTextExtentPoint32W
SelectObject
TextOutW

comdlg32

GetSaveFileNameW
GetFileTitleW

comctl32

ord17

ole32

CoTaskMemFree
CoTaskMemAlloc

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ