2dacc9ec55ffa498a17a74e6104b8927 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dacc9ec55ffa498a17a74e6104b8927
Size

157KB
MD5

2dacc9ec55ffa498a17a74e6104b8927
SHA1

da363965fead2baf800f33857c1b0f804612965a
SHA256

928472de24cf4dd267e903726791f71bd0af6f517f6b74288ef06ac87e11595f
SHA512

ece058fa8fccc9bd320e7ad6e510b1926132020527891153a4f4f7d3aaff419d2b05d2b43b9d2c3aac0c62951cdd67fa7557a6f8f2c05485c9bae590853aba32
SSDEEP

3072:kNUE8GczxlD0dKMhREItqAQiQLwyeTLwFMc0+SDsxkpget82gTzqRtDdfom:kNFrCTDwCkzyqwuc0+s1gUb8zql

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dacc9ec55ffa498a17a74e6104b8927

Files

2dacc9ec55ffa498a17a74e6104b8927
.exe windows:4 windows x86 arch:x86

e16d158dc4c03734d412e5e10fd4d9e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStringTypeW
LocalFileTimeToFileTime
GetNextVDMCommand
FindClose
SetThreadPriority
CompareStringA
GetLocalTime
SetCurrentDirectoryW
FileTimeToSystemTime
GetShortPathNameW
SystemTimeToFileTime
FindFirstFileW
FreeLibrary
EnumResourceNamesW
SetEnvironmentVariableW
RegisterWaitForSingleObject
SetErrorMode
FindNextFileW
FileTimeToLocalFileTime
LoadResource
FindResourceW
SearchPathW

user32

InvalidateRgn
GetWindowInfo
ExcludeUpdateRgn
GetCapture
ValidateRect
SetCapture
ValidateRgn
ReleaseCapture
GetUpdateRgn

Sections

.text
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imul
Size: 1024B - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ