2d37bac8a6fa9a0942a8b743e8ac6002 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d37bac8a6fa9a0942a8b743e8ac6002
Size

53KB
MD5

2d37bac8a6fa9a0942a8b743e8ac6002
SHA1

589f05a752dde716512daf2a5293ebb129c1219b
SHA256

9aa4f61b99c86364f05e5a26ac53debf50207f7b6f548ecb789558edbf7b8d1c
SHA512

053151c3b6e89f6ba8e6896bfb67074cea3509b447153dc15dfb71a0d08c09d17be047504233fc819c7c22dbf5d923c906fdce7144e87462a5c8870dfd6ec82f
SSDEEP

1536:Gykmvsypn5EH08n53/KCYHL3RiAfLi7aKYYHScRScrSc4ScNq:GCkInb853/VGfLi5PxRxrx4xN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d37bac8a6fa9a0942a8b743e8ac6002

Files

2d37bac8a6fa9a0942a8b743e8ac6002
.exe windows:4 windows x86 arch:x86

aa6bad5b0bfecf9f9c8257e864d67fb7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA

Sections

.text
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ