2bf8703169c3a46270624c19a1b876d5 | Triage

Sharing

General

Target

2bf8703169c3a46270624c19a1b876d5
Size

84KB
MD5

2bf8703169c3a46270624c19a1b876d5
SHA1

3d290e602b74d17ea60498e2be2e3ed0f647c172
SHA256

21d345ac473b1720f1b2aff4de4760e49784ef52135f8ed0bdd406317ab925d1
SHA512

0ae88da2a8786152af515eb911d2b987faa1c3beba4f06a36c41695f20f7c32092a2b78ee01ba5029134a5e04ff896426679eb96cc9c07cce1ed36a8abe6c041
SSDEEP

1536:4uHsRXKV/4DLsc2YWz1PxIT7y8Ri71iEykx6Uc8YaEJwZK4/83ZoMOAI:MpHs0WhaTZi5iNUhZEXtpxI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf8703169c3a46270624c19a1b876d5

Files

2bf8703169c3a46270624c19a1b876d5
.exe windows:4 windows x86 arch:x86

fcc84a0c6eccb8783142eab103625746

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommConfig
CopyFileA
GetCommMask
GlobalFix
DefineDosDeviceW
SetConsoleInputExeNameW
IsDebuggerPresent
FreeEnvironmentStringsA
ScrollConsoleScreenBufferW
GetSystemWow64DirectoryW
GetCommModemStatus

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE