2f6b577503d30e78bbcf66a4835b76ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f6b577503d30e78bbcf66a4835b76ab
Size

124KB
MD5

2f6b577503d30e78bbcf66a4835b76ab
SHA1

9afe6463f9002c320383bbd5aee7bfbcd7ecda5a
SHA256

09d905dbb887f7d2adf82b02e5e7cd403a4f78134d74938afb64dcfe862b88e6
SHA512

076e56082a6fd30e0aa62f34b89bcf10d90da149e88fcc6f9a68208650ad2963a4ed942a4d47568ca4d638ad57d475c9d913e696245e42f89f0a9106211d0313
SSDEEP

768:vQxkwifBsIqHpcrkMEYEhA7P4RhAtmaZFb79U9MKAjBEig6/1k21m3uHRdMNDj2Y:v8kwilTEhU4HDa1KkjWXUa21mc/Mue9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f6b577503d30e78bbcf66a4835b76ab

Files

2f6b577503d30e78bbcf66a4835b76ab
.exe windows:4 windows x86 arch:x86

bcc72ef83efb1f1feb04585842b4fa1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

user32

TranslateMessage
DispatchMessageA
GetMessageA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vyfupyo
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE