2b81d4cd67c9057cd162df7c5cddd698 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b81d4cd67c9057cd162df7c5cddd698
Size

88KB
MD5

2b81d4cd67c9057cd162df7c5cddd698
SHA1

c8d0113b8a16a29d54b23e2c407becd8f214110b
SHA256

a84c2dca0189f3ae3587d51b5ac7b78d71d5ca218bcd486e15ea871d36bcfbb3
SHA512

b538e92e1f4baa693dabfff4760904f4912ffa22b90318a167cfffbe82a56e8210a526e6bbab30fa9f8b5b090f2bd23f548ed471f507e427155a273d92d7d3fe
SSDEEP

1536:Q2yt89zhpy7kXsecterkJJ8DMo3jR6hvdgvIrHHYtiEN8uUp6JNXlfE5w:Q2+azhvVrkJCDpdeWu4tiEN7tXhR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b81d4cd67c9057cd162df7c5cddd698

Files

2b81d4cd67c9057cd162df7c5cddd698
.dll windows:4 windows x86 arch:x86

7475697cf1dea9b402f23a6bfa833be4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
VirtualFree
VirtualAlloc
LoadLibraryA

user32

GetDesktopWindow
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
DialogBoxParamA

Sections

.text
Size: 54KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

dfd
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ