2b74f690f9fb43ab040e814b4ee695f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b74f690f9fb43ab040e814b4ee695f8
Size

59KB
MD5

2b74f690f9fb43ab040e814b4ee695f8
SHA1

9604535664d20f2ccf4fbad7b2d0f0c6ed9ae745
SHA256

7444fdd5d7fc726b95879ca908365080c93eddf53120f74a15b023b33348c3d3
SHA512

62db9b4ac06665ec3cc914cb755f40034efe9aa49e6e3581396c73b99150528055c192831bc3a5ecd977ed681ea1dafaf3c3a40c06397ead84a10703a5755403
SSDEEP

768:Lkh/ytVgMVmIIRuZ5ABIeUQ2ZH2cq5vnanbIEoT/h7fzHQ1U7fzHPiLaLThkNLMP:FMJRuACQ6WXdnab/haLThkNLKiLBsNaO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b74f690f9fb43ab040e814b4ee695f8

Files

2b74f690f9fb43ab040e814b4ee695f8
.exe windows:4 windows x86 arch:x86

8912d690046fc0a5650eaa20d89725ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
GetModuleHandleA
GetStartupInfoA

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strncat
_adjust_fdiv

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ