2a1db36160de880c1bbc37a14a481821 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a1db36160de880c1bbc37a14a481821
Size

7KB
MD5

2a1db36160de880c1bbc37a14a481821
SHA1

3d74e70e99a1bd467e06c7037141fc7d6c6d68ef
SHA256

257c10c19d8ce86f38ae879121e467616ca1dbd3ca0e96d4b14e5fc48d1b973a
SHA512

5639bb4e1e734cd57e562b83e4e5103ecc93c14b0e3aee1cdc6fb777fa67f03af4380a98dd58922df08047f71595b490b45a0f3df6164aba97ab9c6bf18c5687
SSDEEP

24:eFGStrJ9u0/6lbwKnZdfgBQAV16WYNYKViYW3pGCbuqiksvc8jxpmB:is08x4BQAi2VDhqqilkpB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a1db36160de880c1bbc37a14a481821

Files

2a1db36160de880c1bbc37a14a481821
.exe windows:4 windows x64 arch:x64

b4c6fff030479aa3b12625be67bf4914

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ytuc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE