2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb | Triage

Sharing

General

Target

2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb
Size

144KB
MD5

a0fc663d5fac2e06ff05de3d4131638e
SHA1

677dc2b77830813cbf41fd805acdce1763145487
SHA256

2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb
SHA512

4403244226b82efe9b477a098e2e3f33e3e28d5bf6b0f08df2e0fe0e248bbe65f8db45083384c5f21731feb550e7d0fb0edc81853da017d3e0b63468f9d4e7ec
SSDEEP

3072:GWMIJWZY1gTz6Anp7+s7q5s81+1zJFpriSrY1Z:wogqAnZJ25VOpe0YX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb

Files

2ab0ff0bfe74a4aec79ae41e678933816ff0310c85d4ff7ee12cac1b373a54cb
.exe windows:1 windows x86 arch:x86

d82ceab8013612dc27ff5d9983c81aac

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptBinaryToStringA

kernel32

GetLastError
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
SetLastError
GetModuleHandleA
lstrcpyA
lstrcmpA
lstrcatA
lstrcmpiA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

shlwapi

PathAppendA

crtdll

__GetMainArgs
exit
raise
signal

framedyn

?ReleaseBuffer@CHString@@QAEXH@Z

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 200B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE