2baf3aba66746c388a77c7ea3895ecb6 | Triage

Sharing

General

Target

2baf3aba66746c388a77c7ea3895ecb6
Size

107KB
MD5

2baf3aba66746c388a77c7ea3895ecb6
SHA1

9976d075a2f213e15ebf83c67e54d6a437c3e84e
SHA256

da94e9d1fd07accbfd6f06dd0d44d6980f5a084783cf2b2fbf9bfb7f5f920b06
SHA512

9d78d7c8603ac1dfe352064cdbf19bec4fac456c8d911953ef795897dce98b5f1f0549ffb403d606affc18a5079b63b1c615245cb661d25408f3b6f260c8abb1
SSDEEP

3072:wRcPpKqTjAGtGTkDPQfReom2Lj9Ar0SZRg:woYujAGIT+YFPmZR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2baf3aba66746c388a77c7ea3895ecb6

Files

2baf3aba66746c388a77c7ea3895ecb6
.exe windows:4 windows x86 arch:x86

af7fdb9ebf2cb69a553a3b994499fc16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

DragQueryFileAorW
StrStrIA
DuplicateIcon

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE