2b696b025221fe22440663f5fc1e7a41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b696b025221fe22440663f5fc1e7a41
Size

1.3MB
MD5

2b696b025221fe22440663f5fc1e7a41
SHA1

47126cf5fcf0caf6cbc7a07e232684c9e885b797
SHA256

e8a71de440848f166651644d31d64f2560d638cdb8839a7e35f17beccced6e7d
SHA512

ae36d0982409404788bf0d81ee122205f6cf6d892f951e57e16195bc734c4923c69471b1f295e57d07d278a438b107acf6751f0c06b39dc006811ba63afd9cc6
SSDEEP

24576:2/FIln45DR1PnoKYtatnVfo5YTetYp9C/BabGKTMrDsd8QDFVF+4kFBQEPhc4RCJ:niJoKPnO0ON9Ds+OFmdrQEK+gmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b696b025221fe22440663f5fc1e7a41

Files

2b696b025221fe22440663f5fc1e7a41
.dll windows:5 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 66KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bnzjmhjh
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zogsxwqz
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE