2d8a7fe5b1b22dd0add00498ed04938c[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d8a7fe5b1b22dd0add00498ed04938c.exe
Size

3.5MB
MD5

2d8a7fe5b1b22dd0add00498ed04938c
SHA1

dcdf5cb21275ca54bf3299fbfa0b6f131ba9d612
SHA256

b45111e9ac26b8a1671ca9890bab769521a7dea853d5cc708f69002ca56dedd8
SHA512

218bc9655aa7f078849e73dff3a7087ef762f361946e6f2b72e016aa244e0e7490ea91dac5657fd2fd01fa6e82ce8e49a749edb0c3953364d8929253f92427e3
SSDEEP

49152:9skuOfMAK2hiolVuQ45Thh02/9U67hYvFNFHyNYrvAgsaOBVlYdXIqBTy/zalNvR:JhiiVwdU6VIYNYrYgkBYd4qBT9ZfJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d8a7fe5b1b22dd0add00498ed04938c.exe

Files

2d8a7fe5b1b22dd0add00498ed04938c.exe
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 9.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.F:T
Size: - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.AI]
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.L6k
Size: 15.6MB - Virtual size: 15.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ