a2f5d0f1509075d353e9a52fb2c9c3b2 | Triage

Sharing

General

Target

a2f5d0f1509075d353e9a52fb2c9c3b2
Size

86KB
MD5

a2f5d0f1509075d353e9a52fb2c9c3b2
SHA1

0b1cf9807565d55394a1b6d38d655c0f9d9b0239
SHA256

c32d1b598c064397e86dfb300430c859d00853104d72ed7764661bbf877cdcf3
SHA512

acc79568d65f650d961894b89c0e8aa4643a8b9165a7a7c49d7a7f4133cd4bedb2c105fef7abbe32ebebc20ca4938dd543f01002ba41f22aa83ef66fdcffe9c8
SSDEEP

1536:Rq6VPpA6glAm6G5tt1m6qBH/gBl3RTEQWRjQvb8y+CPXgLgFM8T26gNlT5bBfX1r:TglAXEtt1cgBTEQWRMbd2cTvgDLCQwcX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2f5d0f1509075d353e9a52fb2c9c3b2

Files

a2f5d0f1509075d353e9a52fb2c9c3b2
.dll windows:4 windows x86 arch:x86

31666f78e7cfda8a155cea6461e3ffe3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetTapeParameters
DeviceIoControl
GetEnvironmentStringsA
GetNamedPipeHandleStateA
GlobalUnfix
GetCurrentConsoleFont
BuildCommDCBW
LockResource
HeapValidate
GetTempPathA
SleepEx
DebugBreak
FindVolumeMountPointClose
EraseTape
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE