2a3b82e7fbce0b630128b7f73ca6fe38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a3b82e7fbce0b630128b7f73ca6fe38
Size

49KB
MD5

2a3b82e7fbce0b630128b7f73ca6fe38
SHA1

dff9439cf5beda11dafaa1c6a4b2aed43ae38ddd
SHA256

b30190cde6addda133f555dcbd9e4388f6143fb53ab7f40c590b50c1c4bf92a4
SHA512

4aea9a08b561674511383f27c6187de677b24b47b881fba5a112bdfbe4c96f4bc774a34b23fe6b6b232e073126109db2751767e686d7fd244fcf51e8d197db0c
SSDEEP

768:TrLjl662qhVBlRMsZ4OSziJSz3Cm6TO6++WykXoAjLyU+k7jJ3sHzqHRayDfN:d6AhV7RMEfWZ6Td++ILf7OHWwybN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3b82e7fbce0b630128b7f73ca6fe38

Files

2a3b82e7fbce0b630128b7f73ca6fe38
.exe windows:5 windows x86 arch:x86

e1258c04f3cf5bce24368e041174a46b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenMutexW

shlwapi

PathFileExistsW
PathFindFileNameW
PathMatchSpecW
PathRemoveFileSpecW
StrCmpNIA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseDesktop
CloseWindowStation
DispatchMessageA
DrawIcon
GetClipboardData
GetKeyboardState
GetWindowLongA
LoadCursorA
OpenDesktopA

Sections

.byx
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nip
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bwpwf
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ