2b2ddcab1aa3df804e88c62ff25fb12e | Triage

Sharing

General

Target

2b2ddcab1aa3df804e88c62ff25fb12e
Size

248KB
MD5

2b2ddcab1aa3df804e88c62ff25fb12e
SHA1

e599c00905a57e482595f2404c42bf8e06d8b802
SHA256

9f8f85a2766cde2e114d6bc85a7cbe37ab47ec3328501df38a15a8b4c5a3bbc0
SHA512

5522adcb4d15c8403973332fef7097f90fac35aee9d4f5d22ad14c49b19e87f036816145219bff06eb7f18621e45a5b56a24889352366ccf9443655cdb441da9
SSDEEP

6144:4dEjetZziZfOe+Abf/0xc8aLa3AsaJBTMK1L:TjenmfOhaUmrLa7wBbL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b2ddcab1aa3df804e88c62ff25fb12e

Files

2b2ddcab1aa3df804e88c62ff25fb12e
.dll windows:4 windows x86 arch:x86

e1490596d2022ef55d88f0b0480145f3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CharToOemA
CallNextHookEx
CallWindowProcA
AdjustWindowRectEx
CharUpperBuffA
CharLowerBuffA
CharLowerA
BeginPaint
CharNextW
CharNextA

version

VerInstallFileA
VerFindFileA
GetFileVersionInfoSizeA

kernel32

ExitThread
GetProcAddress
GetModuleHandleA
LoadLibraryExA
GetModuleHandleW
IsBadReadPtr
ExitProcess
LoadLibraryA
GetCommandLineW
lstrlenA
GetACP
VirtualAllocEx

Sections

CODE
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 4KB - Virtual size: 553B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ddata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ