2960e531367e74ec0f7cd758f6368aa9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2960e531367e74ec0f7cd758f6368aa9
Size

32KB
MD5

2960e531367e74ec0f7cd758f6368aa9
SHA1

55b33bea2fba860a6cb777a24adbfe0d8ebfb066
SHA256

1112f1fba286bf3ff1540e046548a84cf292b01a847414d15ba21ff7ba9f7539
SHA512

01dba185203b8695d58a6f3c5329375212c6722d874bd4a3c204ad31f21136181161990c6da36071cc2016268b2cc7201677247784bc36b185b54ee55f54e3ce
SSDEEP

768:IMX78Lrt589GyeXD3TrWMeun88+iIkKIk7X9XoOVI66:IQ78ft5UG9p88pIBIk7X9XvIV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2960e531367e74ec0f7cd758f6368aa9

Files

2960e531367e74ec0f7cd758f6368aa9
.exe windows:4 windows x86 arch:x86

c2ec2b2f10d52cf707d44ef84432409d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryA
VirtualProtect
CloseHandle
GetFileSize
CreateFileA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetModuleFileNameA
GetModuleHandleA

user32

wsprintfA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE