2b76fc80014996744e9013df0e9247dfeb138a8cf8e3815988d08d57f6f7d98f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b76fc80014996744e9013df0e9247dfeb138a8cf8e3815988d08d57f6f7d98f
Size

5.5MB
MD5

cfaa5b4cd1f9d947887f8aff61ac32a3
SHA1

901e9abc6868af5c54e390ed4d67fc95e2fef49c
SHA256

2b76fc80014996744e9013df0e9247dfeb138a8cf8e3815988d08d57f6f7d98f
SHA512

e5c95db47853e733ecad81ebfd0ae80f73d722340fb1747ca12c43cfa28d09da4190abf96ed6624bb6cdb1cc7f7c421852a8ac2cf82b655186a5080e3565422e
SSDEEP

98304:JiejojnVLZC2bpoDmsWaADS84lV/PsajhnJxeTSfTpwG8BUaH9Sz4FKpn:YeoVJQUf4lVnFhJxeTW8CadS8Fcn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b76fc80014996744e9013df0e9247dfeb138a8cf8e3815988d08d57f6f7d98f

Files

2b76fc80014996744e9013df0e9247dfeb138a8cf8e3815988d08d57f6f7d98f
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ