2a66bd91b49ffdb263ff5b25b1782d96 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a66bd91b49ffdb263ff5b25b1782d96
Size

64KB
MD5

2a66bd91b49ffdb263ff5b25b1782d96
SHA1

10e447d937ae63dfffc0a639b004b5656ba28f29
SHA256

43c2694682265cd3dff2b25dac4f36096aed5d7162f09af3df26c1030900ad17
SHA512

898815b4ebb215a161d648a089b15ed1a70d9db0c599eca7cb97f20e9e68beaa681a23474dd583178d0fdb5eae2ead903f3b0823dc7533a7496e2f5ee3e9b074
SSDEEP

1536:LKZiivgFkwb9nG3mlCaHLWX1TDZL5sjGZ6Wj7TkWsq7ZzBFLWp+W:wvcTZltLWX1TDVCyZ6WXwWfRq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a66bd91b49ffdb263ff5b25b1782d96

Files

2a66bd91b49ffdb263ff5b25b1782d96
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 44KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE