2b7eab5c137d7f2ae5ace05e2a8fb557 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b7eab5c137d7f2ae5ace05e2a8fb557
Size

741KB
MD5

2b7eab5c137d7f2ae5ace05e2a8fb557
SHA1

3f3b31ac679fbbc48cf49b11c1156c3c76c19f33
SHA256

44729f684b16f7fb0c8725da3eb29b03f70cecd2e35ddfcdb759890d148cb5d7
SHA512

96bca2c329915e5b300e9fdd5a4280b1e14d72b20378d67fa192ed4547889e2c0cbef96e035045fc909280e5113b63a9815b5c754b57d5dda79a5ed15f4016d8
SSDEEP

12288:yMlkRIrJH1DXVKMGl8ALeZTEDDCAdNTfSpPmsVPb3tXfKXeZG+OgCLK7D747h7:9eaR1DXVKkEq0fUxiXwG+qL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b7eab5c137d7f2ae5ace05e2a8fb557

Files

2b7eab5c137d7f2ae5ace05e2a8fb557
.exe windows:4 windows x86 arch:x86

ba5aecb45dd9a89321c7a6ee7ba6e748

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

GetDC

gdi32

SaveDC

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

DragFinish

comctl32

ord17

ole32

CoInitialize

oleaut32

SysFreeString

winmm

timeSetEvent

shlwapi

PathIsURLW

wininet

InternetOpenW

Sections

.MPRESS1
Size: 592KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 147KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE