2a6bfaf987499b276a4a17312f750eb6 | Triage

Sharing

General

Target

2a6bfaf987499b276a4a17312f750eb6
Size

88KB
MD5

2a6bfaf987499b276a4a17312f750eb6
SHA1

136af06ba026a15b98a5faeb981c9e9e8233398e
SHA256

767a3715eb05d0dd5e572a80b9f6a8fc94cc229fd4e76c8b12c11e6b6e6c5e41
SHA512

f4afc8ab9abe04f7feca78ee7a722718fd58d7fc3c3eea6679971bd190f7079be40dd8424470cbe8e87f728ecafdf7bcc6c65c57cee3b5c4c9f85e1b81c404ea
SSDEEP

1536:odt3imMfRWjynVXj+K+rZbKvnvD9bqci9tGvMVwCsFB0TTiXG+pO5I:C36gjoKK+SnvDhFIpiGKXG+M5I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a6bfaf987499b276a4a17312f750eb6

Files

2a6bfaf987499b276a4a17312f750eb6
.dll windows:4 windows x86 arch:x86

f25c03c23668e602dc8b9ff67b4faa37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
FindResourceA
GetDateFormatA
GetLastError
GetLocalTime
OpenFileMappingA
lstrcmpiA
lstrlenA

Sections

.text
Size: 21KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ