2b6d4b55ab27cb2c050a8e32aa527a0a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b6d4b55ab27cb2c050a8e32aa527a0a
Size

242KB
MD5

2b6d4b55ab27cb2c050a8e32aa527a0a
SHA1

9f0fba665cf5a9de0a295599a3565c56be76ff6f
SHA256

eca62cda54a72123bb125e96b477c42891a24c2dd6b7deff44986debecac3ace
SHA512

d9bf9d92fdc3c496abda8c2085cb8fbe079e99d6cc8f8f5578cea92ea2404bb5e97871f1e8dbb46037e650271228a978172a0f4c7e55b2690d2d6669ded57245
SSDEEP

6144:th5vDA8DxZl1ieOlwqwAOocwYVhGXIPjdEg:th5r1erejoTQh8IPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b6d4b55ab27cb2c050a8e32aa527a0a

Files

2b6d4b55ab27cb2c050a8e32aa527a0a
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 233KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE