2708d8d54e37580f9a8294011b73eb4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2708d8d54e37580f9a8294011b73eb4f
Size

76KB
MD5

2708d8d54e37580f9a8294011b73eb4f
SHA1

8ca7b704ce7bc9c30430466c35c96d4fc5beb3af
SHA256

8ff0e9b34cf830d648b5b673ce2e1ea2f69d7fbeecfc7c4855a69b0899aac152
SHA512

917ab95191e581da3cb7782e78f84565ed6db38a78a4fabf46c74fa6b7be7f152b863b9796cd196c28a5dff374d1ed9ce08629fdbebb88ad48c11f16726e52d8
SSDEEP

1536:SrWBiHHVVGR0Xf/giXOOaYjW8ndUUh6lbAYBgIYF2pjVrs2ryrd1vUQuq6:jig0v/gGOOpiC+UhuARF2Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2708d8d54e37580f9a8294011b73eb4f

Files

2708d8d54e37580f9a8294011b73eb4f
.exe windows:4 windows x86 arch:x86

8f53db9637cc40702e4854e33b059fd0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlFillMemory
EnumResourceNamesA
SetLocalPrimaryComputerNameW
GetProcessWorkingSetSize
FindActCtxSectionStringA
GetFileType
SetMessageWaitingIndicator
GetNumaHighestNodeNumber
EnumLanguageGroupLocalesA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE