2a646932028b1c0a16c88efca8ccbb9c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a646932028b1c0a16c88efca8ccbb9c
Size

83KB
MD5

2a646932028b1c0a16c88efca8ccbb9c
SHA1

43856f90a18c66555ceefe78132f412c2ebe9187
SHA256

6c3b8e408982cfa32975372d56b8f6944e69c6ceea38948a5107603c8210ca06
SHA512

c78d40bcbc995acd7be81b3c0471450aa52c1ce569141249e0c6aa9cf689b07c284e2c9ce32ea2c3a616776fae3c03fcfd39da48877cd3950dd728d482f521de
SSDEEP

1536:fzshf0p+Cew7/uJkm38N3b0h4BEfX0xF5RNf1BnJNP7dcntGQA58Em:Lyxqwh4OfcF5RNf1Njdrm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a646932028b1c0a16c88efca8ccbb9c

Files

2a646932028b1c0a16c88efca8ccbb9c
.exe windows:4 windows x86 arch:x86

7f5432ab92471c007c3c66e6b21deee3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProfileSectionW
WaitForDebugEvent
CreateProcessInternalW
GetNamedPipeHandleStateA
VirtualQueryEx
GetNumberOfConsoleInputEvents
GetShortPathNameW
GetFileAttributesA
ResetWriteWatch
GetConsoleTitleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE