2cf8852eecee0416991d17be3ec97ed4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cf8852eecee0416991d17be3ec97ed4
Size

45KB
MD5

2cf8852eecee0416991d17be3ec97ed4
SHA1

cef3f0d24b352527d76fe7abef4aa0060a876b63
SHA256

9dd65e38c359b6c285aacc0ea030d84a0717efd4a0befad5f7be63ba7258f1af
SHA512

d4f22ca69433bc091ef6152dfe18fa05ab0890190f12caba99f3f5dc90e5c94d56d748595c7ca4fd4226385c9f6ba662626b8c70d91eda6619e836513c947991
SSDEEP

384:WPO/Zkdfw14uGkuK9ItjX+mbi1iCe0HL1JjFrClmiv4XVZpq4nd/uBjxM7:wO/ZuGYVOaS2VqL1JBrCl4fpHd/0y7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cf8852eecee0416991d17be3ec97ed4

Files

2cf8852eecee0416991d17be3ec97ed4
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 5KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pebundle
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE