2b5a8731251db3e95d053d14cb576f01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b5a8731251db3e95d053d14cb576f01
Size

323KB
MD5

2b5a8731251db3e95d053d14cb576f01
SHA1

ae2604b6ed1c30117b20807e246d7e79be9c8b93
SHA256

b958ba716f0df17c2b91d58e1fc32540c40d03c9b88b652b4020d04216734109
SHA512

176b6aa3ca414d3b49776ba4f4e5934b2da434a2e158cc6205ae885249a1122c1d1db8062ecb141f7e2129ad6d0744f4f1a2bfe2e6e5ecc67037912c22450e13
SSDEEP

6144:/ZpFokzaqnAm/Hc3QB5pUJPBCFPDdiW6D4GRf0w+uV/RhkWlx:/jKInATg/p8mcNRswzX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/diannjsq-v2.5.exe

Files

2b5a8731251db3e95d053d14cb576f01
.rar
diannjsq-v2.5.exe
.exe windows:4 windows x86 arch:x86

48b6135b63945cc7cf948c056d01f8bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHFileOperationA

Sections

CODE
Size: 300KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
新云软件.url
.url