2b0fc38f336f6fbad149c6826a056105 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b0fc38f336f6fbad149c6826a056105
Size

26KB
MD5

2b0fc38f336f6fbad149c6826a056105
SHA1

150346d8e5192f7c5c7f013bcbe34a419105d32f
SHA256

54b912994c84c2ba287856b04e9804b0ecd01c062eed6093a7ff2b4526bd9ab4
SHA512

8ba0c6b277e717cdc029dc6efd7986d908d66322ed31b1633c3c8366295ca10cdc90e376a84d213fc20ac60280db72fdba09f6e87300beef57e8581bd3261622
SSDEEP

384:fH8YCCrzjYCpvQ57Bk8up6IkHyt/OU6KxWCE8c6uE/wj:P8YHrz0Cu57q8uPkhkPfD//E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b0fc38f336f6fbad149c6826a056105

Files

2b0fc38f336f6fbad149c6826a056105
.exe windows:4 windows x86 arch:x86

8ee604399d0f9a631af648b90fbb46b8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GlobalUnlock
FindResourceA
HeapCreate
PulseEvent
IsBadStringPtrW
lstrlen
CreateMutexA
LoadLibraryW
FindClose
GetEnvironmentVariableA
GetModuleHandleA
CloseHandle
ReleaseMutex
TlsGetValue
LocalFree
CreateFileA
TerminateThread
SetLastError
Sleep

user32

GetIconInfo
CopyRect
FillRect
GetDC
IsWindow
DispatchMessageA
SetFocus
CheckRadioButton
DrawMenuBar
CallWindowProcA
DrawEdge
DefWindowProcW
GetDlgItem

msasn1

ASN1BEREncBool
ASN1BERDecNull
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncEoid

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE