2af2924dc66f77006bfd758fccf967b8 | Triage

Sharing

General

Target

2af2924dc66f77006bfd758fccf967b8
Size

19KB
MD5

2af2924dc66f77006bfd758fccf967b8
SHA1

7ae8660d74ef1104d6204b7c2fa39ebc0d733257
SHA256

71c2c2008d3b33b406c6d4d5e9152cd013601e67a56176a6974ad513a907db1a
SHA512

20c83049c7f5c26fcf2cf6e8122745da7375b16b86cd77ffd2601825da7324035d1dbc3dbea45e0abff2c3573d5b2955bac1c73f416d892a9ac602ea63f1cb8d
SSDEEP

384:Ha0hGHoOOB/OpbQ0EICjw74+LN0lCS0lxiu7NOs6DBSR+4HR5zgB+IB1:RsIODue74+LSlzQxiu7oW+4xCz7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af2924dc66f77006bfd758fccf967b8

Files

2af2924dc66f77006bfd758fccf967b8
.exe windows:5 windows x86 arch:x86

4582ffdd7eb98cb63a937096204182b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xcpad
Size: - Virtual size: 16.0MB

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ