d2cc7e50ee286a6499772d2311f7224b37732584279fcb95c6765a0adf430a08 | Triage

Sharing

General

Target

d2cc7e50ee286a6499772d2311f7224b37732584279fcb95c6765a0adf430a08
Size

193KB
MD5

b3a7585b9303747b529e243aba9b9f1f
SHA1

e80a9c4c9d8ab0d4fbe32786a838cca023816948
SHA256

d2cc7e50ee286a6499772d2311f7224b37732584279fcb95c6765a0adf430a08
SHA512

8e4a8aa279e0a0705b8e0b74e80935bcb3b79753febc55853a118b1f1b4f95f8d0cf2185b99e1e4f9196c5d5c7208ffaf4c51e1dd038807060b30e31ad29344a
SSDEEP

3072:yENOu3ap01kqMTue7+AVETnb6Km9gFTFTHugCoReiVWeJfefVUxJ+60tPH4kMFr:jKp+kqKt7DV4bzm2FTFbIyVWeU2xgzMN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2cc7e50ee286a6499772d2311f7224b37732584279fcb95c6765a0adf430a08

Files

d2cc7e50ee286a6499772d2311f7224b37732584279fcb95c6765a0adf430a08
.exe windows:1 windows x86 arch:x86

84b346c4696dd5bf782e43918d6653c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
RtlUnwind

user32

GetCursorInfo

crtdll

__GetMainArgs
exit
raise
signal

ntdll

RtlInitUnicodeString
RtlFreeHeap

advapi32

RegOpenKeyExA
RegQueryValueExA

ulib

?Usage@PROGRAM@@UBEXXZ

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc2
Size: 313B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE