easy_Malicious_2b5183bc26f937b6061e2768be849075f46cfdb5072d56b5d0b0dcd03182a6bd[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

easy_Malicious_2b5183bc26f937b6061e2768be849075f46cfdb5072d56b5d0b0dcd03182a6bd.exe
Size

76KB
MD5

5f6e5fc592d7648b668e4215ef741444
SHA1

9a31fc025a45aed6daf1aecddb9f57eea4778d26
SHA256

27d3aa4021d227d961622503b324427d3f37a272da0af1aba618dd9b30ffb15b
SHA512

f9d635c72145b16ad80bb9bdf8971154732c75493515f8d0873b818e4b93481f28f584caf1fa6158483b98f12b27529a4b7e79f803e0874e724a6f2d3bb3084a
SSDEEP

1536:DdD9P00uDIOsLalpgW5TiJOqn8XfNbpjVrs2ryrd1vUQuqF:p9FuDIOLfgW5TiD8PNbHs2qX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Malicious_2b5183bc26f937b6061e2768be849075f46cfdb5072d56b5d0b0dcd03182a6bd.exe

Files

easy_Malicious_2b5183bc26f937b6061e2768be849075f46cfdb5072d56b5d0b0dcd03182a6bd.exe
.exe windows x86

093e651b31213b9a9614bfcf149c5995

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersionExW
SetFileAttributesW
GetLongPathNameW
lstrcmp
OpenFileMappingW
WriteConsoleInputA
LocalFileTimeToFileTime
SetProcessPriorityBoost
LocalFlags
CreateMailslotA
FindNextFileA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE