2b37a1b5c2a53c15a00808e5f72e0126 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b37a1b5c2a53c15a00808e5f72e0126
Size

3.0MB
MD5

2b37a1b5c2a53c15a00808e5f72e0126
SHA1

c24938843df28cf62a0324398e6f0d427b00cf93
SHA256

f80b3f690d4040a548b229248d3ae7544bc76b4160efecfd7a3e395580abd42a
SHA512

82781d0f99a55c2c3cae9f521717d03a12dedc4ba337cfdf87c43622d9a1d3d65e22131e402b9b4f9f42f6f4ff3b807edac65b7f223459ce4b8446091b31c8e8
SSDEEP

49152:kui08oPLMWycqI/vaSKwObvb5FPpzBSjlw6EPPIYa1lUy1iielqCJ19Y:pijqLxBqOvaSKvFPNBFd3IYasGlIqib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b37a1b5c2a53c15a00808e5f72e0126

Files

2b37a1b5c2a53c15a00808e5f72e0126
.exe windows:4 windows x86 arch:x86

b6ffb9014d502d1650226318aef9871f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 3.0MB - Virtual size: 12.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE