2786d8c162190a6e0e200b3e89d2a26a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2786d8c162190a6e0e200b3e89d2a26a
Size

62KB
MD5

2786d8c162190a6e0e200b3e89d2a26a
SHA1

39da3e84af81441d5724cd6ca8f865451bde0e99
SHA256

59615b41cce2bdb0f3b2e0b56e1c6f6a2bc2748718a4d09a666a3413b3859e53
SHA512

924d855de105d282a03c0a3c2101f4a83baa262e3dc547f9518225cbcac9e184bea3950af89e9b0c7b07425f7c291fe124f19978f70773382688d899139c2370
SSDEEP

1536:q8Hmue1ZcLta42Es7M79Aw4GMTjWsmvXNL6O3xvUjnPo:qK8ZcLT2EmTw4FjWd24KjnQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2786d8c162190a6e0e200b3e89d2a26a

Files

2786d8c162190a6e0e200b3e89d2a26a
.exe windows:4 windows x86 arch:x86

9a0f9b05619e56df45f54e2343b2347c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
QueryDepthSList
GetCommModemStatus
GetFileAttributesExW
BackupRead
GlobalGetAtomNameW
SuspendThread
VirtualFree
GetFirmwareEnvironmentVariableW
GetTapeParameters
GetSystemWow64DirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE