c2bb9b68a268308c3454505d93139fbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2bb9b68a268308c3454505d93139fbd
Size

29.1MB
MD5

c2bb9b68a268308c3454505d93139fbd
SHA1

285964bd8dd1d277bc05a1f99a183d5fee85268e
SHA256

d458690c583373328525b6334bfb8433c069813a9dd2c70ab528dcb26b4314b8
SHA512

ad45796882febc00eca2439bd4c313e4f1d4dc8da63c3fdbb0c466f08d404f3fd5e03b2b57e9fe8c689cf8dda76c7d4f72ef70d945b09d8ccb39d0ac4833c7dc
SSDEEP

393216:G9qnqezSDCaFpK8RbFQS7owjpjI49PGx+2tO5NXlkkslv0fya8Nx1gujz/1GSERM:ZJKbpFW9c5GmStlR2MNiBzf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2bb9b68a268308c3454505d93139fbd

Files

c2bb9b68a268308c3454505d93139fbd
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

$qq1
Size: 28.9MB - Virtual size: 28.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ