2ba524b2d3ecb0b4d578003425197a09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ba524b2d3ecb0b4d578003425197a09
Size

209KB
MD5

2ba524b2d3ecb0b4d578003425197a09
SHA1

4dec46dc45d26376b12064b38c6b4d14065776cc
SHA256

8cb035d38d771bf93fb7435e33221801d7f05bc43e9cef1cdce3581fe9863392
SHA512

dcddbb9417603b0c4f4881ab5d098a218235fe48e2428e32aa44ae4d4c91ccadd306f38a73e38840508ceb8c5bd302125a23bdbb64ad2f088caecd4ec01b625d
SSDEEP

6144:Cl2kpG14Hyx0fm9dPoatvApStqWQ5NLHE9Tc:Pk2RakdPTtvFqWaLHAT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ba524b2d3ecb0b4d578003425197a09

Files

2ba524b2d3ecb0b4d578003425197a09
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE