2b2ea29ff08291b32cc0fb149d752809[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b2ea29ff08291b32cc0fb149d752809.exe
Size

1.2MB
MD5

2b2ea29ff08291b32cc0fb149d752809
SHA1

8390f5b948c6124c30c526db6d12c26b6b0f2eec
SHA256

b1fe8e781835e41eae759a167f5a866f9c979203c6e3798a060383eaf5420b14
SHA512

64ed66eb5dc60f2f715d60b332c90ef289703640ad6e91236cca958393a9f2d1ffd53fc52637b7259e677c4f3b7bcdcaadf55723815c06166a9ea5a0b66d77bf
SSDEEP

24576:TUAp29SeetE44L6EkMRtqrhL6krlcTAdT2:T1eetE4i3+hGkrWsI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b2ea29ff08291b32cc0fb149d752809.exe

Files

2b2ea29ff08291b32cc0fb149d752809.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 982KB - Virtual size: 982KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ