2b404dffef5ccc56e3c7a5339e54d238 | Triage

Sharing

General

Target

2b404dffef5ccc56e3c7a5339e54d238
Size

33KB
MD5

2b404dffef5ccc56e3c7a5339e54d238
SHA1

fafcb6b435f56699278db2b17721d6157535c80d
SHA256

1ddc59f33166de3607090833d48b1573c6ab4108fec400ee63009cfc7a5a455c
SHA512

d85a750681a2a0dde993e0abb9128dfe37ad998f318f1517feceb99853fd0257233e7e2627cdf57fb51ef78d22c568e563a917141a07f2e2bd73e9bfba077314
SSDEEP

768:Bn3SBAdJ22b2xpj3wnyaX6+RjUuQdTn9cHdx/s6hw9Lo:hSBAbp28LbdRI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b404dffef5ccc56e3c7a5339e54d238

Files

2b404dffef5ccc56e3c7a5339e54d238
.exe windows:4 windows x86 arch:x86

dd211e2c83c9b4642c33fed8c81b90d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strncmp
strchr
sprintf
_itoa
_chkstk
atoi
strstr
strncpy
memset
RtlRandom

kernel32

lstrcpynA
VirtualFree
VirtualAlloc
OpenProcess
SetCurrentDirectoryA
GetTimeZoneInformation
GetCurrentProcessId
GetWindowsDirectoryA
GetSystemDirectoryA
ReadFile
Sleep
CloseHandle
WriteFile
SetFilePointer
CreateFileA
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
GetSystemTime
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
GetLocalTime
GetCurrentDirectoryA

psapi

GetModuleFileNameExA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE