2b7b1a7baa119af48d24ba3afa516092 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b7b1a7baa119af48d24ba3afa516092
Size

132KB
MD5

2b7b1a7baa119af48d24ba3afa516092
SHA1

25644f0192966505d42121b3f5cb54d1a6f0b927
SHA256

47734e5dd45add3c631cf3fc857ac0bc4c2e71857c4576e8abf511d3814a515a
SHA512

33d745ec6394c0fea0e2fc241bded1a2b2e2a52624380d431e33e4994398d646d6aa0c5d81ddf2ad8232f431f9e6c4527f5aeaf7d00cd7aba8e1bb73a546d7e7
SSDEEP

1536:VySscdhwyva0P8zFomDA7FD0wTSvWozsEZD9/F6YSy9WVTcxrDLTTG51T76mQvzZ:VyAatmxN6o+1nKths2cBbSYll

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b7b1a7baa119af48d24ba3afa516092

Files

2b7b1a7baa119af48d24ba3afa516092
.dll windows:4 windows x86 arch:x86

9021bffd2d185b59617a745adf5ecc6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

export

LeeSistFich

Exports

Exports

estableceproc_dll
principal

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ