2ab798639c01075cfe76275ff8a69780 | Triage

Sharing

General

Target

2ab798639c01075cfe76275ff8a69780
Size

421KB
MD5

2ab798639c01075cfe76275ff8a69780
SHA1

082f0d4dffd08f13e44be8bdfa321aae8f90fbaa
SHA256

835fd28e9fbcc1edd03af57aff39d4097062590ea308eb95eee43e5db4cb48d3
SHA512

f4989958370e22d4c88d71fce370347bcfab79de5ff88e62e53248b96a7cf08c65d2c710b028a10aca6a3363643f4bcf7cfb78f0809106aa7b08ca14ef0ca045
SSDEEP

12288:ysHIB7QkKRaug8yeikCykaAOl13l0Pz8MBqIp:ysHU7+h5yeilykkln0PzZBqIp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ab798639c01075cfe76275ff8a69780

Files

2ab798639c01075cfe76275ff8a69780
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ