2900261c3ce62ee4be8df4c9331e41b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2900261c3ce62ee4be8df4c9331e41b9
Size

48KB
MD5

2900261c3ce62ee4be8df4c9331e41b9
SHA1

0813ace940706f438e68f8fb1f58039534f108a8
SHA256

250d24f5fd867f3f547823a86d2d86d0a67d35df5803ed6dc2df98b8ac0f6cdb
SHA512

6717d639b7e262dc037f4d89fb9b5469c81c423e4704de5e1ee9393d95af2c115221813a4eae3c4b667b44ecfc2fd74debcbb10c676909698c251586cc0fcf21
SSDEEP

1536:y1Iu2B9FjbeGUdTVJjRtv6r7axXKuaidI+ygL5K2:y1gB9F2Gq/HKNuaiOrAK2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2900261c3ce62ee4be8df4c9331e41b9

Files

2900261c3ce62ee4be8df4c9331e41b9
.exe windows:4 windows x86 arch:x86

1c2d3c56017ffc9f272aae4a4d190dcc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

MessageBoxA

comctl32

InitCommonControls

Sections

CODE
Size: 30KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.taz
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE