2b1cbc4763648d88ec2dce24e6bf5ecb | Triage

Sharing

General

Target

2b1cbc4763648d88ec2dce24e6bf5ecb
Size

83KB
MD5

2b1cbc4763648d88ec2dce24e6bf5ecb
SHA1

75f4ac4e8fb3bd2c1d8ac709c9c183b8a57bf65d
SHA256

5bb79941702a8b8dfd3a4c72a20a1ec5e259d79d3a9dcc8c11091598803b7662
SHA512

cf3381fa9ff2fdf41ce7b669b45be4a0b7891442573b8818d90549243d1dc8ef4f95a6685028c160032646483ef90b949a35a48fd069b4807b3ecc1b9396ff95
SSDEEP

1536:37SbqULkehcD8fdnXFiaMxTqfAcZA4AlUWOtGjEErxTWDTMqhGKYIZTET8mpL:37SbJIMfFVf2TqfAmApGWOEjBkMqhGKI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b1cbc4763648d88ec2dce24e6bf5ecb

Files

2b1cbc4763648d88ec2dce24e6bf5ecb
.exe windows:4 windows x86 arch:x86

1075cbbcee11ba6a87c335bda86a7d5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNamedPipeInfo
VirtualQuery
LoadLibraryExA
HeapWalk
SetConsoleCommandHistoryMode
MoveFileExW
GetFileAttributesA
CreateProcessInternalW
ReadConsoleInputExW
GetConsoleCommandHistoryLengthW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE