2fd808d90dc443a592383370c86e7734 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fd808d90dc443a592383370c86e7734
Size

152KB
MD5

2fd808d90dc443a592383370c86e7734
SHA1

d346202ebd969acdd8c80db1a64448498524061b
SHA256

40b2aa518ca95a81b74a22080df90bae41eb07e3ad7be421191726cae33448e7
SHA512

e4714bb283ec2a72be9fb6017ec950d7a8814093945fcda0eb433ca8dd02020d758868437cc651d24593b80bcfa7e24f9dd45243cc256c8c611bb88034d46d07
SSDEEP

3072:5j0AeQULpfUJpDQhG+xUqeSLlVT4/veMnQd1BY/dlMNAOK1v/a:B0BfUJpDY3UZSLlVc3e11BY/dCGb/a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fd808d90dc443a592383370c86e7734

Files

2fd808d90dc443a592383370c86e7734
.exe windows:4 windows x86 arch:x86

df4b396e83d70f0eccdfc3d1516f4eb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelDeviceWakeupRequest
EraseTape
GetProcessShutdownParameters
HeapCreate
OpenMutexA
QueryInformationJobObject
ExpungeConsoleCommandHistoryW
AreFileApisANSI
GetDriveTypeA
ReadConsoleOutputAttribute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 137KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE