2[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2.exe
Size

385KB
MD5

f488790f6608a2e2b7d53e539484a8eb
SHA1

ed26a4faa5e8c285c8ea3af6b62fd86ac1341a66
SHA256

baf1ef6054b6f5218ae5c53b563d80f8a6bfc96a486e25550f613c9a4024634b
SHA512

ee372937647cdc6a9f0d01f2996cc4ab7539c820f1ea96acce2fe5fd3218a1a537d5a197d5b34d396c7d2d6eb8567fd34de1cebe5fa183bd645182914937a664
SSDEEP

6144:6/t3hKdGsTRI2+yjtg6EoMix1dCjODEPgpBqhLFWzUJ5mIQ:2t3hfWRI2+sgC13DEPgSY7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2.exe

Files

2.exe
.exe windows:6 windows x86 arch:x86

6a06d1fa38af061b6a93049c91c70ea8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessW
ExitProcess

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
GetDeviceCaps
GetObjectW
SelectObject

user32

GetDC
ReleaseDC

Sections

.text
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ