2b2f680647d0c28f97b7427ec94e54ed | Triage

Sharing

General

Target

2b2f680647d0c28f97b7427ec94e54ed
Size

9KB
MD5

2b2f680647d0c28f97b7427ec94e54ed
SHA1

2edc719de7badfc7b2b786341effa8353b3cea50
SHA256

2787e839c5c221c1f800a5c44ea0a314edc5657fca7d1a861f15e93e3b747f59
SHA512

5d86983f7b501d0f32db5ca0de0f7d25a9665e21b45b4b1dcfa28e3c0d6e5fd8e43beffa606f4ca17642247c659e6d02c5de0acdc4c0916f0b2eb41a062464b0
SSDEEP

192:SrGT2YkfyDcGwQfBOgBrkT52QuUqzhZR:nuGweBpBra5WUqzh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b2f680647d0c28f97b7427ec94e54ed

Files

2b2f680647d0c28f97b7427ec94e54ed
.dll windows:5 windows x86 arch:x86

3cdfddc440ade9f1fc0adfb733989a51

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WaitForSingleObject
Sleep
OpenMutexA
CreateMutexA
CreateThread
GetFileSize
lstrcmpA
SetFilePointer
HeapAlloc
GetTickCount
GetProcessHeap
ReadFile
LoadLibraryA
WinExec
GetTempPathA
DeleteFileA
lstrlenA
GetLastError
lstrcpyA
CloseHandle
SetFileAttributesA
CopyFileA
lstrcatA
GetSystemDirectoryA
WriteFile
HeapFree
CreateFileA

user32

wsprintfA
CopyIcon
LoadCursorA
SetSystemCursor

advapi32

RegSetValueExA
RegOpenKeyExA

Exports

Exports

Export

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ