2f3f8b6c6f33d7d8090fb58517a666fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f3f8b6c6f33d7d8090fb58517a666fb
Size

143KB
MD5

2f3f8b6c6f33d7d8090fb58517a666fb
SHA1

4c7c975e2a7151db65b945a73feea06771a27e07
SHA256

f0026e3c80a32bbc62dafde36a33d2e9198bda97ccbc1189101ea725937c9e87
SHA512

e9c58200c45269ffeff7f095dcf4d09f44199c1b88301f7f616a38aaf2f61543a716b3bc09ab5161aff8e237c58f8f573b0b163d7c70c77475e2828797f08e9f
SSDEEP

1536:HL+hPQzDGDm8VjJU+ncIRE7/zp1wzBrz4:APYDGDljJUaccC/0dQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f3f8b6c6f33d7d8090fb58517a666fb

Files

2f3f8b6c6f33d7d8090fb58517a666fb
.exe windows:5 windows x86 arch:x86

1307ca4a5090aed188f46a41b87bf7e2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetScrollPos
DrawIcon

advapi32

RegCreateKeyW
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExW

kernel32

ExitProcess
OpenFile

Sections

.jjkn
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.haga
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mjcn
Size: 80KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lihc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ