2f5eba5717bb888468348252d36c30f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f5eba5717bb888468348252d36c30f5
Size

3.3MB
MD5

2f5eba5717bb888468348252d36c30f5
SHA1

5f60399bed052c4b85e4f18d314c3f6f646d3c36
SHA256

4a2286d54aef02265f405e2d4b8acc49de1c376cbedcb09064c077bf65a0d2f3
SHA512

e83b4a2ea4cc7404df0801516fef10003f90b2717db0a36feec3540e028473c638b80819aaabc58974208a5e44ec6506064fbdd99849b9590ebf946ef4fe4f3f
SSDEEP

98304:i+gRPJaOuXQVY5C8+occO0E2QdFXYU5kC7iIy:eJhu+wC8LccXtQdFrkSib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f5eba5717bb888468348252d36c30f5

Files

2f5eba5717bb888468348252d36c30f5
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ