2b1432ef93e6466c27d4ac59028ee254[.]exe | Triage

Sharing

General

Target

2b1432ef93e6466c27d4ac59028ee254.exe
Size

165KB
MD5

2b1432ef93e6466c27d4ac59028ee254
SHA1

e7a68440a69e99033e6ba2ca9fa19ab931584c28
SHA256

a5574d4791492293674dddbb259309a2cdb24471103484a0882f3c076a7cc1ef
SHA512

c694cf1b9cc2ad6bcbbad4cacc7bd2d94cf49231bde87ff47688c5bcc758f31fd458df01cb3fb4c569932d8c25246e0f60584090a162d888e59b6841ee0e38a5
SSDEEP

3072:aAWT36du5VmyT4gLHz7iFm6Y+HD6I4Ich4yqiDQkfnoFa4uX2:avr6du5VrTfznLgJiXvTf4aP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b1432ef93e6466c27d4ac59028ee254.exe

Files

2b1432ef93e6466c27d4ac59028ee254.exe
.exe windows:4 windows x86 arch:x86

85780d47283ef731a2297d7032d6da42

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameW
QueryPerformanceCounter
FindFirstFileA
GlobalHandle
GetCurrentThreadId
FindNextFileA
GetModuleHandleA
GetCurrentProcessId
lstrlenA
IsDBCSLeadByte
EnumResourceTypesA
GetSystemDirectoryW
SetFilePointer
EnumResourceLanguagesW
WideCharToMultiByte
WriteFile
ReadFile
FindClose

oleacc

LresultFromObject
CreateStdAccessibleProxyW

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ