2fb48905c553456dec5dcb778e45bde2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fb48905c553456dec5dcb778e45bde2
Size

76KB
MD5

2fb48905c553456dec5dcb778e45bde2
SHA1

49e0c4a6c1434831a29d12e341f58f3e9b783ba5
SHA256

9c73df3b6975bb5c37a91c4822f6bdb82d319204e854d2d923d350acd585e7a1
SHA512

1aa4eaeb84db86fb1b2cf13669f2a7864b95e0f634e3f6ef243362ee61d895577fed9d76e867963a257a651098714ca9097afdfec2dbdf9c31a60be981e2bae1
SSDEEP

1536:EzID2O6AWxIt6tbMe4h1gPT8jc+P6vzYufxGahfO5ffZLkINRqh2:EzIadlCnnurvzHhhfYfRLkV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fb48905c553456dec5dcb778e45bde2

Files

2fb48905c553456dec5dcb778e45bde2
.exe windows:4 windows x86 arch:x86

fdc4d80357a3ddc0799a98a24c3703bc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
TrackPopupMenu
IsWindowUnicode
UnhookWindowsHookEx
SystemParametersInfoA
TranslateMDISysAccel
GetMenu
ShowWindow

kernel32

VirtualAlloc
LoadLibraryA
GlobalAddAtomA
GetVersionExA
GetVersion
ExitProcess

Exports

Exports

EOgSi_SZHJmMFj
pDeWobm9U
_bKp76_nC@24
0kAjZiRh2I

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ