2b8b1e4a96cd13bd3cca0787151f49e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b8b1e4a96cd13bd3cca0787151f49e1
Size

36KB
MD5

2b8b1e4a96cd13bd3cca0787151f49e1
SHA1

6376607a1abbcb8abd8ac9f54f549f232c8cb425
SHA256

6ae8376c568fb32d0eda14e189a1ba991170f0ad05d94f7191fd9dfb422dc8dd
SHA512

bf75ec1ad98a8aa00897f02340b3cb20d58c0d81944f47d611026b77bf299105c82ad8abf3a20dd366ccfb57452dea43dd040e7894a59a456169d91c55bb88a7
SSDEEP

768:UwDEzLFS21QwsYE+z4DSmGBZdWW9TQ1nxx0LTd0P90Wamg7rIP1QE:UwAzLFdLo+z4jGBZdvTYncnd0Vap3IP1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b8b1e4a96cd13bd3cca0787151f49e1

Files

2b8b1e4a96cd13bd3cca0787151f49e1
.exe windows:4 windows x86 arch:x86

dc60d466c2f415a23f861358f676cfeb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateMailslotW
DefineDosDeviceA
CommConfigDialogW
FindFirstFileExA
GetCurrentDirectoryA
WaitNamedPipeA
SetConsoleTitleA
GetProfileIntW

user32

DialogBoxParamW
LoadIconA
IsCharAlphaA
AppendMenuA
TranslateAcceleratorA
LoadCursorFromFileA
SetWindowsHookA
GrayStringA

gdi32

CopyEnhMetaFileW
GetObjectA
GetICMProfileA

Sections

.data
Size: 29KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 1024B - Virtual size: 630B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ