2c1971ea30a412d92866e17e9a3c3f367abcd526c8c92c9255bc88d6162d68e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c1971ea30a412d92866e17e9a3c3f367abcd526c8c92c9255bc88d6162d68e2
Size

7.7MB
MD5

5e1cce221d5ee293b7a02edea8ffc8e2
SHA1

828b9ec9e0f51f991f2051838db73a3637b60977
SHA256

2c1971ea30a412d92866e17e9a3c3f367abcd526c8c92c9255bc88d6162d68e2
SHA512

4503bd2338df5fbd58c2284e55cc90684ced6567cde5b170a89c8eac2263974125e4b39ddd6d9153c85dce9a57aa41099c89ba629f08235d711b54e497dcb9f8
SSDEEP

196608:Oxm5+owJB5yCqVoeL8gqA1u8QWGVq/iUYJ0Mnizj:Jw7rq1L58WGVqaDizj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c1971ea30a412d92866e17e9a3c3f367abcd526c8c92c9255bc88d6162d68e2

Files

2c1971ea30a412d92866e17e9a3c3f367abcd526c8c92c9255bc88d6162d68e2
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ