2bd25eb423860ca47e4700b48cd9ec30 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bd25eb423860ca47e4700b48cd9ec30
Size

34KB
MD5

2bd25eb423860ca47e4700b48cd9ec30
SHA1

a5cb3b3947d13f8b7f248c602c13bfa885dac439
SHA256

7efeb22b6a4f24a69c1744e40bde87962801905048830b60cbc26308f54afd7f
SHA512

110b00e93e133b407aae2245d07992ea8da64b22ce399fa67b648b8d25c820b6cd02a3bfde14e14a8fc0d4ccdd5ce12215b7e9acc1c81b178ebe6197972dad70
SSDEEP

768:DKjtO2wE4BmDXOgsCEYRBrLcvd8yB00K/lU7TTSDXaXtU:+j4hEVD+Jmu70zi7TeDXF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bd25eb423860ca47e4700b48cd9ec30

Files

2bd25eb423860ca47e4700b48cd9ec30
.exe windows:4 windows x86 arch:x86

af7fdb9ebf2cb69a553a3b994499fc16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetDateFormatW

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

shell32

DragQueryFileAorW
StrStrIA
DuplicateIcon

Sections

.text
Size: 20KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE