2b78190f0b27b976878be80d2fb6d35f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b78190f0b27b976878be80d2fb6d35f
Size

374KB
MD5

2b78190f0b27b976878be80d2fb6d35f
SHA1

4108df82d93c08bca3b1dfdebb53cf33ebe41014
SHA256

055c21868bfed39208aa2ab1057e65e101d6e45fc0a9b562b90212c6b58772a0
SHA512

9114d87c2f124f7dbc1d0a6a784e0b80bd98175224d43d983e4fd1c8ae1ebd538274b7eb947af477d7b74fae9750c052ebfafc6165ef4b88e9574d135f4a0f5c
SSDEEP

6144:EzZ5uE/ljbOW/BOrt8S6FooLn72KXGKB4uROxIvByY886dVYOT+P:EzZoE/9/BO8P32+UgOxvA6dVY48

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b78190f0b27b976878be80d2fb6d35f

Files

2b78190f0b27b976878be80d2fb6d35f
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 452KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nkh
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE