2a7aa62c2d99ed0c2bcd3e2e4352e251 | Triage

Sharing

General

Target

2a7aa62c2d99ed0c2bcd3e2e4352e251
Size

296KB
MD5

2a7aa62c2d99ed0c2bcd3e2e4352e251
SHA1

1141523a4336025267e1fc30a13aea15b4ba36c0
SHA256

ae1c898bcdedcdf1f7512546b6aec53733d073a175920edcf83803bcfdf0c44b
SHA512

c556e8e8c64bc2dc2511571300baca9dcde97c7d599a44dbb7345c2e20d02805dde17fbe67f3b104d5d8cc3e5fe956f9a0a3aa05392063f352c0b8f8947e7723
SSDEEP

6144:f96LzCTw0jTHwOZDoxX55m47C+ySRIJrcyTkm:MXw/THx2X5Y9pSRIJrLom

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a7aa62c2d99ed0c2bcd3e2e4352e251

Files

2a7aa62c2d99ed0c2bcd3e2e4352e251
.exe windows:4 windows x86 arch:x86

8fcf57146ab824bb067bf2896f723f7e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAllocEx
CreateFileA
LoadLibraryA
GetProcAddress
GetWindowsDirectoryW
lstrcatW
CreateFileW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ