2b364bd1dcca28780a82ab9a5a55339f67f083fec5ae32c7a51b7c9d67074002 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b364bd1dcca28780a82ab9a5a55339f67f083fec5ae32c7a51b7c9d67074002
Size

7.2MB
MD5

fbd8a7ee1f36b7faa8345620d6de8048
SHA1

850bd636d51ea3a127160f8007f2d03e0545db8e
SHA256

2b364bd1dcca28780a82ab9a5a55339f67f083fec5ae32c7a51b7c9d67074002
SHA512

14e284a874aa99d7a66c5c8f259569382d7f05af9481a2ca53de6ebf127b17d8f31ef230cdd659da6c339d8fbf450b6256c89155383d6c7e02a5a1f17d9b0ced
SSDEEP

196608:Rxm50EF70ZaWLZ97vnC8LpS7+bI9cpSzj:/Et0Zak7aIA7kSzj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b364bd1dcca28780a82ab9a5a55339f67f083fec5ae32c7a51b7c9d67074002

Files

2b364bd1dcca28780a82ab9a5a55339f67f083fec5ae32c7a51b7c9d67074002
.exe windows:1 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ