2dbfcd7971d41ee9d518be993ef048770244afa442d24782615351692962c14c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dbfcd7971d41ee9d518be993ef048770244afa442d24782615351692962c14c
Size

134KB
MD5

1f95e9ac44b44cd4407c92d1b6f1514a
SHA1

0c43b6de38b389dc636ed758d7ad46963bb95db1
SHA256

2dbfcd7971d41ee9d518be993ef048770244afa442d24782615351692962c14c
SHA512

2bee1220b60493bced60cfa64e7fffe432d0be655f8a7487b7c01ef5aefa4d974de8e1d49b63f0c8691e93506d90e6786bf220b61a43df73f42c96a81f0840c2
SSDEEP

3072:bUD9JxpzoSIP9tKXYPgqtA8+FnH07e9R23RnvU:bUD9JxpzozP6vq+80nU7zR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dbfcd7971d41ee9d518be993ef048770244afa442d24782615351692962c14c

Files

2dbfcd7971d41ee9d518be993ef048770244afa442d24782615351692962c14c
.exe windows x86

7356561522da79605eab86fd45677a06

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
lstrlenA
WriteFile
CreateFileA
FindResourceA
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetOEMCP
GetACP
GetCPInfo
ReadFile
MultiByteToWideChar
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
FlushFileBuffers
SetFilePointer
GetStdHandle
WideCharToMultiByte
GetModuleFileNameA
VirtualFree
VirtualAlloc
HeapReAlloc
SetStdHandle
GetStringTypeW

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
_onexit
__dllonexit
_CxxThrowException
__CxxFrameHandler
??2@YAPAXI@Z

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ