2d7bab5c368a9ca381ad33b7aa2ae6d9 | Triage

Sharing

General

Target

2d7bab5c368a9ca381ad33b7aa2ae6d9
Size

8.6MB
MD5

2d7bab5c368a9ca381ad33b7aa2ae6d9
SHA1

3b48e7abdb1bf7e933636d43668535ce2d8b62e9
SHA256

64b012bc400f7c29ae6286d3a35751dcf1d6160bd4abf63eeea0eb400ea0f8b5
SHA512

e895234a3a41c1be3a384e59ea94c53f01cf11b61cb28848d7af1b010e6781774feea9e78fed816e32fc938c2d3419674a6715643e5f628d8efe0d74c25ee3c4
SSDEEP

98304:FmD+eNwfUbXkfUbXCfUbXCfUbXtn9TBfUbXCfUbX/yVPKAv:FAwfUAfUefUefUhn9TBfUefU+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d7bab5c368a9ca381ad33b7aa2ae6d9

Files

2d7bab5c368a9ca381ad33b7aa2ae6d9
.exe windows:1 windows x86 arch:x86

500ff1538958cc73738bf0c262a1773f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

MessageBoxA

Sections

.dafixer
Size: 541KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dafixer
Size: 10KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dafixer
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dafixer
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dafixer
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dafixer
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 122KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dafixer
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE