2bc50ec9bcf6ea0c55b2e6d2adecba73 | Triage

Sharing

General

Target

2bc50ec9bcf6ea0c55b2e6d2adecba73
Size

5KB
MD5

2bc50ec9bcf6ea0c55b2e6d2adecba73
SHA1

b534c2e5d70d207723da957b430e96b1b1c623fd
SHA256

7d112d0827b086451aede2f49965d5d225e589aa38b9e1243c8ffaba9544e344
SHA512

c4e0a338d9b50f252a041fef3676201a152e236c26112bce2fcdec44b26050e66c6d44cce741af9d9411bccd6e5b3b35bbd8244d1ce248954cf0be3e33e65936
SSDEEP

96:ZKzc7wD4aarnv2oowXrYiOUiOBhYxGFV:erDNarnuoN7YcJh/L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bc50ec9bcf6ea0c55b2e6d2adecba73

Files

2bc50ec9bcf6ea0c55b2e6d2adecba73
.dll windows:1 windows x86 arch:x86

3d1846a763be46ba47eb86df38cf2625

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

CallNextHookEx
EnumChildWindows
GetActiveWindow
GetWindowTextA
IsWindow
SendMessageA
SetWindowsHookExA
UnhookWindowsHookEx

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
GetFileSize
GlobalAlloc
GlobalFree
MapViewOfFile
ReadFile
SetFilePointer
UnmapViewOfFile
WriteFile

Exports

Exports

FlushCache_
GetSystemDescriptor_

Sections

AUTO
Size: 2KB - Virtual size:

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DGROUP
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size:

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ