2c2dc39fbb04ac0b437ac6950aad1938 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c2dc39fbb04ac0b437ac6950aad1938
Size

407KB
MD5

2c2dc39fbb04ac0b437ac6950aad1938
SHA1

5d46e38a10e87bd2c31de877ddcdb2d284be1594
SHA256

8ca917aab48301c73e0c7da22c8c76b07ba32987acc96441f4ac0eac21c286af
SHA512

70d6e7b5355b3209abb1d7ab5dad055c20104ec83f0035a637916e0de11b51fb0a7cb874ee6ca1adc0f3835c6bd0ba14595528f1d409ff3b5e44b2803f1ce71a
SSDEEP

3072:uTCDYDg+vr87rnj3WCW2EW51HKKnWAmLRkgUA1nQZwFGVO4Mqg+WDG:IooZIFH5nQLRp1nQ4QLL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c2dc39fbb04ac0b437ac6950aad1938

Files

2c2dc39fbb04ac0b437ac6950aad1938
.exe windows:4 windows x86 arch:x86

7909826cb72884560635663c8951a127

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

advapi32

OpenProcessToken

user32

ExitWindowsEx

version

GetFileVersionInfoSizeA

ws2_32

WSAStartup

Sections

VHqxTUpa
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IaDsgWGk
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE