2c9aebc0d5a63b7a785dfb4074db60d6b4c14dbb3f1fbe7f9a04b42ac5b91cb3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c9aebc0d5a63b7a785dfb4074db60d6b4c14dbb3f1fbe7f9a04b42ac5b91cb3
Size

35KB
MD5

486b49c02293f30f267b3e4667c2abfb
SHA1

f332568df74b6f5d6dff9be957a5a60e33cbf412
SHA256

2c9aebc0d5a63b7a785dfb4074db60d6b4c14dbb3f1fbe7f9a04b42ac5b91cb3
SHA512

8ac737474ff87753ba9d726e0ffdca8ecc333918d7e80921948d60238ea854b146380348937b72778d33d4c6728bbbf9bc2e78ecd0c6523ffe964c923f3c21e5
SSDEEP

384:kkju1dbvG8Qqrxiw39A9TMi8WXj6qPv1r8SleyKzGb74g3Lc23c51sZvEfj:hIC+ZGjnP9VKzO3H3c5mZUj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c9aebc0d5a63b7a785dfb4074db60d6b4c14dbb3f1fbe7f9a04b42ac5b91cb3

Files

2c9aebc0d5a63b7a785dfb4074db60d6b4c14dbb3f1fbe7f9a04b42ac5b91cb3
.exe windows:4 windows x86 arch:x86

3a9c09fa738a6f8013500f35f9420e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
PostMessageA
GetDlgItem
SendMessageA
MessageBoxA
CreatePopupMenu
CreateCursor
DestroyCursor
ShowCursor
CreateMenu
InsertMenuA
CharLowerA
DialogBoxParamA
DestroyMenu

kernel32

CloseHandle
GetTickCount
GetCurrentProcessId
GetCurrentThreadId
GetStartupInfoA
lstrcpyA

gdi32

CreateFontIndirectA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ