a2c0fd9fcac76d27f6d247f6089582ae934bc8c49bd04af464e0d1ce2f29c6a0 | Triage

Sharing

General

Target

a2c0fd9fcac76d27f6d247f6089582ae934bc8c49bd04af464e0d1ce2f29c6a0
Size

1.4MB
MD5

a48d43a4941e4d9217be80412dae65a3
SHA1

9851692fe0a780e0274101b0b91e3a47831b2e49
SHA256

a2c0fd9fcac76d27f6d247f6089582ae934bc8c49bd04af464e0d1ce2f29c6a0
SHA512

4661191a87083ebcce233b69f152ad32d902f4ccb602a9de10a9e07a68bc3b32cf76effce0f4460dfc2a4923589a3fb7af05b5122a5f0443217ca039df839c4c
SSDEEP

24576:yllj5JC7qVOuFN4IE7HUfMbmz5bcV2cZpoSFFGPw9TCBH932depnY3rIcja2NU5m:4TJC7KpEUMqz9cV2s5rGUTi9ebDakedI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2c0fd9fcac76d27f6d247f6089582ae934bc8c49bd04af464e0d1ce2f29c6a0

Files

a2c0fd9fcac76d27f6d247f6089582ae934bc8c49bd04af464e0d1ce2f29c6a0
.dll windows:4 windows x86 arch:x86

8d0ad1ebab27319a54108a31ac8fad9c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle

user32

EnumChildWindows

msvcrt

__dllonexit

psapi

GetMappedFileNameW

advapi32

RegQueryValueExA

shell32

SHGetFolderPathW

Exports

Exports

CreatePatch
___CPPdebugHook

Sections

.text
Size: 263KB - Virtual size: 964KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ