2b34f0db48010db75c5954c36eb6e402 | Triage

Sharing

General

Target

2b34f0db48010db75c5954c36eb6e402
Size

5KB
MD5

2b34f0db48010db75c5954c36eb6e402
SHA1

469f95e3cb5f34c2925cf1ec34b9ed89e9052e04
SHA256

7cd7b42e782ebd7818e0d20e1d133b16097f55908431db40e572ea09aee95169
SHA512

fe5ea5baf1247b910456cfe83c4710c77948b1c9ff5a89167d510fe4a9dc7ab5b415751b85a32bac7ec470262feabea97b208e47ecd77d7d44f5aa7dcc2f004f
SSDEEP

96:VZaI/lSZRdyWYrAyougcTsQjhluuujkY/sv7rbgfh:VZ1IPyWYHotc5jhAFwY/t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b34f0db48010db75c5954c36eb6e402

Files

2b34f0db48010db75c5954c36eb6e402
.exe windows:4 windows x86 arch:x86

f151d8614a7d21653bd3cc554fbb4a88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetDriveTypeA
GetLogicalDriveStringsA
GetModuleFileNameA
SetFileAttributesA
DeleteFileA
WriteFile
lstrcatA
lstrcpyA
lstrlenA
CreateThread
CreateFileA
CopyFileA
Sleep
CloseHandle

user32

SendMessageA
GetForegroundWindow
FindWindowExA
keybd_event

advapi32

RegCloseKey
RegCreateKeyA
RegSetValueExA
GetUserNameA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 686B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE