2b8ad7afc46aa162715282eb155f4ede | Triage

Sharing

General

Target

2b8ad7afc46aa162715282eb155f4ede
Size

364KB
MD5

2b8ad7afc46aa162715282eb155f4ede
SHA1

3394558ccee19e528b489c9205c273e47fe34f67
SHA256

38d39afff9e4831f012c7d25eaaf223c96b2206487e8fbd7735f7d051cc48fcb
SHA512

db2e0e0071ac51317272e2695d2f28624accaccc1ba7a08a988265373ff7fdefb586f5fb99bc51f6c05deb9f57dabac3b66748cf13a715307f655f4e8bba31f5
SSDEEP

6144:bRoyXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:bRhMFOkbV5f0H2DeJxZaZPJ+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b8ad7afc46aa162715282eb155f4ede

Files

2b8ad7afc46aa162715282eb155f4ede
.exe windows:4 windows x86 arch:x86

152d1dde4d2e794222df6f1418d95f00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP
GlobalUnlock
DeleteAtom
LoadLibraryA
CreateMutexA
ExitThread
CreateFileA
PulseEvent
ReleaseMutex
FindResourceA
SetLastError
CloseHandle
HeapCreate
GlobalFree
GetEnvironmentVariableA
lstrlen
IsBadStringPtrW
TlsGetValue
GetModuleHandleA
FindClose

user32

FillRect
DrawMenuBar
CopyRect
GetDC
SetFocus
GetIconInfo
DrawEdge
IsWindow
DispatchMessageA
GetDlgItem
DefWindowProcW
CheckRadioButton
CallWindowProcA

msasn1

ASN1BERDecCheck
ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecBool
ASN1BEREncBool

dpnet

DirectPlay8Create

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ