sap2000_v25_kg[.]exe | Triage

Sharing

General

Target

sap2000_v25_kg.exe
Size

1.8MB
MD5

2aaa1b5c7a08f99de9abaa7b99303da1
SHA1

34d62be62cdf7fc2204401e76922cb0f1b183183
SHA256

ef04059ee4d496892dc5e9d048f5c94d8186f3b9a1f0a739b2a8e9d9de9dcded
SHA512

4c3861b8bc951421917ebc1c5e3f21e977b996c1dc2978c38629e4cf87d237645ab6f3021d0a1e38aade5bd393da3199de0983bfdf0154e067e962a1958597a7
SSDEEP

49152:/N5kibrHBVCDR3BpTyaKe+uZRMlVBPpW5pN/GChH/nj:lzrBVC93BpTykbMlVlU5j/GAHvj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sap2000_v25_kg.exe

Files

sap2000_v25_kg.exe
.exe windows:6 windows x86 arch:x86

Password: lavteam.org

3f8d34898e2a56c3048fef2e53b74da4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

GetSystemMetrics

advapi32

RegQueryValueA

Sections

Size: - Virtual size: 3.7MB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE