2b796bc5a2fe88af90492aee07d9509c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b796bc5a2fe88af90492aee07d9509c
Size

49KB
MD5

2b796bc5a2fe88af90492aee07d9509c
SHA1

ca0d51a64306acc0b275f92af973aee4e9ef353c
SHA256

19f2aa031c1ef241e510decd508c2d3906b701cc5215f0b0b92d672aaf1c0db3
SHA512

7952df2390134054a7c5660f0b62a588b13346ace109c2da1f1e0e38faa2f6242ef5705a5663fd8a72a345437707c651568ff1abbbb93cd74b901a6f87b604f3
SSDEEP

768:7q1UHIs/4TAuEnVc01/+Buis9zNGQAZJLA7q0SRK3SgabcgOEj1DFUED:u1UHr/4Tmn6a/au/9EQoJG2vgDajfUED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b796bc5a2fe88af90492aee07d9509c

Files

2b796bc5a2fe88af90492aee07d9509c
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 41KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE