2bbc949d438bb716c055600546fc3cc3 | Triage

Sharing

General

Target

2bbc949d438bb716c055600546fc3cc3
Size

7KB
MD5

2bbc949d438bb716c055600546fc3cc3
SHA1

23887ed12040db16ead64bc09f158a1a986b07fa
SHA256

c91ecc57a3018912ea4c96d259784abe43f5a2cefc11c84c651a6c08fa524079
SHA512

c6ef92d7df04a07977c4ddaf2636df40fd4e9d65e03b5c48b0bb19da807785bbd74f531bb71828a29c638d268ae97b84cdaa66ef30db78ea35bd0cdfef771918
SSDEEP

96:Hqg0JJbaojj5lVCiFn9nGnVw3TmxRVAwhig6SzWKWlDEmQr:Hqgc5H5zCiFnkn2T4IgzaKWlDEmK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bbc949d438bb716c055600546fc3cc3

Files

2bbc949d438bb716c055600546fc3cc3
.exe windows:4 windows x86 arch:x86

c8f468f0ff692b97e5d3e75acb48062b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE