2a6be962c66e0f1b5c28781a058bb372671068aa3938ebeb122c87c02c8f6b5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a6be962c66e0f1b5c28781a058bb372671068aa3938ebeb122c87c02c8f6b5d
Size

196KB
MD5

609bd5755ee1d1435d5df6d43f79f0b9
SHA1

7e4d2fb015521d681e3b1f97c81343737a7a4c1f
SHA256

2a6be962c66e0f1b5c28781a058bb372671068aa3938ebeb122c87c02c8f6b5d
SHA512

5c2a825b6b55ef9e8591cbead3f1cf129c2114dc9d6200f73ab8832b346183f5cd2bf615d1ff6a7964488c68d4030f098141f1af0c7a984243ab88e124940e26
SSDEEP

384:DQQ12DE1b7Av7L0L872gjuOBFSRyWCRlNWXpYuZwL//BVbvyzJt67f2JddVm8qJP:ErA1m7tDiRAWZGHBJo6Mk5mptUb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a6be962c66e0f1b5c28781a058bb372671068aa3938ebeb122c87c02c8f6b5d

Files

2a6be962c66e0f1b5c28781a058bb372671068aa3938ebeb122c87c02c8f6b5d
.exe windows:4 windows x86

13ab381dacef214bd7c905ade17ea0aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
lstrlenA
WriteFile
CreateFileA
FindResourceA
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetOEMCP
GetACP
GetCPInfo
ReadFile
MultiByteToWideChar
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
FlushFileBuffers
SetFilePointer
GetStdHandle
WideCharToMultiByte
GetModuleFileNameA
VirtualFree
VirtualAlloc
HeapReAlloc
SetStdHandle
GetStringTypeW

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
_onexit
__dllonexit
_CxxThrowException
_CIpow
__CxxFrameHandler
??2@YAPAXI@Z

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ