2f15d39f74786025c6ef6b80cb4b14ff | Triage

Sharing

General

Target

2f15d39f74786025c6ef6b80cb4b14ff
Size

17KB
MD5

2f15d39f74786025c6ef6b80cb4b14ff
SHA1

f2a1b792b9c01b0b9c5f0248536847a5e973d219
SHA256

e48e26250c52e1c9955479a6a7587d36192917e13086a8771cc5841ef06a646c
SHA512

c8a20bc37157a6b9aae44b4d1332e1cfd3512cf2e64c33b098138985034f26558119e3bc6f0d471f945a8c0c9a37508a261e167bc22a3dafb375d7df7d948ee8
SSDEEP

384:tqhAS8U3F2UtBP/2o86h3RRHAjo4nO1Rou3l:EL8U3F2UnP/nzh3RRHA84nh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f15d39f74786025c6ef6b80cb4b14ff

Files

2f15d39f74786025c6ef6b80cb4b14ff
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ