2bfac2d59fc6c8e319e2af81a086cff6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bfac2d59fc6c8e319e2af81a086cff6
Size

106KB
MD5

2bfac2d59fc6c8e319e2af81a086cff6
SHA1

7627c8d4e76ec089d403ae128d907b3b10a4b246
SHA256

8b482abcdc66a3e193e8f2bb0a56dc55df3a70d49b12115962cbb87a82a8d211
SHA512

4926a335bea3998a613dd01bf30c2ed9255f1cdb86abe22e3fafc77316ec5321d5cc7dc0b16b47331b86d36d6e81a36fe1b087b58b48f57e32e2d5a38eb38ebb
SSDEEP

3072:bMuppkAmwgmNxlAdD28wo7h2wwHsz+knsdMn:XiAmwgmNo48wo7b4s1sin

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bfac2d59fc6c8e319e2af81a086cff6

Files

2bfac2d59fc6c8e319e2af81a086cff6
.exe windows:4 windows x86 arch:x86

2196aab126d1ad3168aa39cff18d045a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareFileTime
CopyFileW
CreateThread
DefineDosDeviceW
EnumResourceTypesW
GetCommConfig
GetConsoleWindow
GetDateFormatW

user32

DdePostAdvise
CascadeWindows
ClientToScreen

msvcrt

_mbccpy
_mbctombb
_mbsdec
_pctype
_snprintf
_snwprintf

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE