2bb00a64d81deb7d2f4e2fdc25557ec6 | Triage

Sharing

General

Target

2bb00a64d81deb7d2f4e2fdc25557ec6
Size

314KB
MD5

2bb00a64d81deb7d2f4e2fdc25557ec6
SHA1

f50069729c543dbbd2f84d13f52fb23973211496
SHA256

e2ad09275fe251e29386586602e8bac19580b3ac7d31c604f27a9a6f306e6bfe
SHA512

1148563c9e919c3315421e74d9b2837773eaa7ed10b0dbc32efff3839f1455a97349d564429f6f24e854ef5d0778c0ba379aab8b45a16bc07915c4491adcf61f
SSDEEP

6144:xkWaJ2ZPwYKmzbIYqeJrPincJao2WWPsdv:xkWHGwb5qepjJzJWP8v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bb00a64d81deb7d2f4e2fdc25557ec6

Files

2bb00a64d81deb7d2f4e2fdc25557ec6
.exe windows:4 windows x86 arch:x86

671a874f6c6ed3a7e2a988e3a6eda278

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteFileW
CopyFileA
DeleteFileA
OpenFileMappingA

user32

GetMenu
DialogBoxParamA
EndDialog
GetWindowTextA
GetWindowTextA

Sections

.DATA
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aext
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 119B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ