2dba1198f50a08aa109fdacb5c7dbd7d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dba1198f50a08aa109fdacb5c7dbd7d
Size

40KB
MD5

2dba1198f50a08aa109fdacb5c7dbd7d
SHA1

282a9dca858ab036a84738e7d49da1550947d62f
SHA256

9aeae77b9af468e15bb519eda3438f0b9f0a281e02d97e5a3cde434bfaeed5d0
SHA512

5111b6ad6943eb9801b14237f6f20aef4813393fc440b0ad779b2cae64feb283a66892bf4de1f685ff1052c7cc8b5e28f8a9bb4ec437ea4ecef22e3f635caf63
SSDEEP

768:iCJWv1MAprK4xz8JxLRhhBQZGvyzi+VAU3YrpufWdYhc:iCJWvdpbF8JxRuZMye+VE7dYhc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dba1198f50a08aa109fdacb5c7dbd7d

Files

2dba1198f50a08aa109fdacb5c7dbd7d
.exe windows:5 windows x86 arch:x86

4cc8d139add458350cac906b4ca9a3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iqozhbr
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE