2cfd6e3fcdb59a739a138d5130512406 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2cfd6e3fcdb59a739a138d5130512406
Size

720KB
MD5

2cfd6e3fcdb59a739a138d5130512406
SHA1

db91ddd33d8ac17be4b8637030a5596960976587
SHA256

327c796699870e5d46dc5fe7ef89fe5bf2401fb8223e4927d26e484b4f824c87
SHA512

a1b00c3e7400cea200c892e5792ac578bf4026d514c9b0e87ab366e2d56177dd9fc08ec078beff68f4914b996abe3a6f7cb3f87beeeb521c05a0ecb1c015b5ac
SSDEEP

12288:LtyjMbd2lL3EHywA3r2TdGaneSoShohZ8685XRk+vbf9tpRPLgDLSsjUkoD:Hbd2lLrwA3reeTyohqr9u+LPp+jjUkE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2cfd6e3fcdb59a739a138d5130512406

Files

2cfd6e3fcdb59a739a138d5130512406
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 204KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 440KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE