2b02ebb2431990da3aa22dda5d73ab88 | Triage

Sharing

General

Target

2b02ebb2431990da3aa22dda5d73ab88
Size

304KB
MD5

2b02ebb2431990da3aa22dda5d73ab88
SHA1

45e6df4c6d3f61a89df5a7693899cf2b3dc634ea
SHA256

0491afadbe9f4b3edb9905f6f590776f58a90d29ba64d0a87c4b76477616406c
SHA512

22caa3dd6b7769b5e47993efd39fae155f8f225c330e1612e45d4615845db1dce819b5fdca9305480790ccd17408baece6c379bd3558fc25a495049e41f57930
SSDEEP

6144:FQgd1vXxMhNn5wI9ox2aIAHR14ULAMqMzajgkK6Gl/3hIacjA1O:qCdBUNaIO48LACWxjGlfuA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b02ebb2431990da3aa22dda5d73ab88

Files

2b02ebb2431990da3aa22dda5d73ab88
.exe windows:4 windows x86 arch:x86

524e45db88dc6439f37b4388f1d8938c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetModuleHandleA
GetProcAddress
VirtualAlloc
TlsFree
GetCurrentThread
Sleep
DeleteTimerQueue
CreateSemaphoreA
GetModuleFileNameA

user32

IsWindowUnicode
PostMessageA

ole32

CoInitialize
CoUninitialize

netapi32

NetDfsManagerInitialize

psapi

GetModuleBaseNameA

avifil32

AVISaveOptionsFree
AVIPutFileOnClipboard

msvfw32

DrawDibEnd

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rss
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 296KB - Virtual size: 640KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xvda
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE