2b6c64cf7091409a42534d19db62ae2b

General

Target

2b6c64cf7091409a42534d19db62ae2b
Size

652KB
MD5

2b6c64cf7091409a42534d19db62ae2b
SHA1

df195b507bb4168f458994df6804893361fe675b
SHA256

6e336a0281462c6c93c3ae3ee534cab09fdb970ac905d3210732eb161b3146f2
SHA512

96874ea8eee8102745730c39df0d00c82bcfd9e433f425b3c11c71421255c9a5c3f1f71362081135eea3ef495c69ca6380554095f8175a5f5ef102bdbcf76733
SSDEEP

12288:QwsmegTqwYTkUCxz/dQV/k6nu62VGUifjiC5l8VKbedxelkK:QLmeg+RkU+lQV/ZnoGBj15Ggedxg7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6c64cf7091409a42534d19db62ae2b

Files

2b6c64cf7091409a42534d19db62ae2b
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

2dc6402ba70c8d4ab40fa57054d7f758

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
HeapValidate
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: - Virtual size: 296KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 136KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4
Size: 52KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2dc6402ba70c8d4ab40fa57054d7f758

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 436KB - Virtual size: 436KB

1 Size: - Virtual size: 296KB

2 Size: 8KB - Virtual size: 5KB

3 Size: 136KB - Virtual size: 134KB

4 Size: 52KB - Virtual size: 75KB

5 Size: 4KB - Virtual size: 3KB

6 Size: 12KB - Virtual size: 36KB

0
Size: 436KB - Virtual size: 436KB

1
Size: - Virtual size: 296KB

2
Size: 8KB - Virtual size: 5KB

3
Size: 136KB - Virtual size: 134KB

4
Size: 52KB - Virtual size: 75KB

5
Size: 4KB - Virtual size: 3KB

6
Size: 12KB - Virtual size: 36KB