2dbd2d540e4cea319c10593a756a415836461ac6bfe3ee23b3495c294af0e406 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2dbd2d540e4cea319c10593a756a415836461ac6bfe3ee23b3495c294af0e406
Size

246KB
MD5

68484b753bc5daed0f83b59c6038a8d0
SHA1

ffb77eca6ce6d4e9a0a413908ada8eac951ab445
SHA256

2dbd2d540e4cea319c10593a756a415836461ac6bfe3ee23b3495c294af0e406
SHA512

0b064e84305009dd2e5ce7ab1855ee50c075d11b1f9864cf4fe6d383cf54eaf1990c5892cecfbabd89fd26a22f47939d41a7c5973eb88e5e0a0a79b8e42d0329
SSDEEP

768:X6gwzFMNzf0IEuai/B4YXCKB1SqKbOBoVbWb/WRXMF1fkuhkAbtFZnAmDXRmC7:BwpMNDbaCB6KdZbeR8F18cjJTRmC7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2dbd2d540e4cea319c10593a756a415836461ac6bfe3ee23b3495c294af0e406

Files

2dbd2d540e4cea319c10593a756a415836461ac6bfe3ee23b3495c294af0e406
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\fawevugu67 bexoraviteg\jalok50_geregegovijow\mumeral.pdb

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 39.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ