2ab9259322b2801f13745b0b014b00a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ab9259322b2801f13745b0b014b00a3
Size

971KB
MD5

2ab9259322b2801f13745b0b014b00a3
SHA1

3f853d23766bac721332d9180f908995501becc3
SHA256

dbabf1de643cfbc3f6d0b9e369e3370a65e767040868669d9d6c1eba8cfc8928
SHA512

6142ea1d77f68675ee0337d9688c74a44cb7aff3f4f13715ef7e9ea18d3c67a4a7ce563eba8f47243c0e1354c76af868957a8860b5f312c83861b311af860309
SSDEEP

24576:jiZSIkb/6t/thy6zhQxPLx6VjFvs+4Uxxy9AEaHKE:GZJkL6tfPVYL0VjFvpgAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ab9259322b2801f13745b0b014b00a3

Files

2ab9259322b2801f13745b0b014b00a3
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 287KB - Virtual size: 636KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xxx
Size: 644KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE