2cfcf8aafa9838be1ade7acc98daebbf21948b82503023deda2784b49f65fb50N | Triage

Sharing

General

Target

2cfcf8aafa9838be1ade7acc98daebbf21948b82503023deda2784b49f65fb50N
Size

80KB
MD5

4c32d91e6a656f5f4db7d601a0232200
SHA1

e49abe3103afb63c6ead5433c8fe14fc9b7e962e
SHA256

2cfcf8aafa9838be1ade7acc98daebbf21948b82503023deda2784b49f65fb50
SHA512

a39623a11be023470709957237a3d48d68c3508d59577094a7b4f6baf72be2958da062fa6f76df01546f9a5f054a9b36ab7ae8e6e76da1841e67fd2ca0401c69
SSDEEP

1536:vj+jsMQMOtEvwDpj5HwYYTjipvF2hBfIuBEk23:vCjsIOtEvwDpj5H9YvQd2+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cfcf8aafa9838be1ade7acc98daebbf21948b82503023deda2784b49f65fb50N

Files

2cfcf8aafa9838be1ade7acc98daebbf21948b82503023deda2784b49f65fb50N
.exe windows:5 windows x86 arch:x86

5c55d83b58dbc1f7154223c32a893074

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
PostQuitMessage
GetMessageA
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
UpdateWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetCPInfo
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 542B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ