2081bf8adf540b011fb64ff2f663921b2cedaf69ea4bc7e0dcd366c71c3d3107 | Triage

Sharing

General

Target

2081bf8adf540b011fb64ff2f663921b2cedaf69ea4bc7e0dcd366c71c3d3107
Size

92KB
MD5

8c616e42a418d380a509e5626faabe91
SHA1

7080c7ab68e85f906a566b014fc18fe03050af0b
SHA256

2081bf8adf540b011fb64ff2f663921b2cedaf69ea4bc7e0dcd366c71c3d3107
SHA512

76165043da935e989c4ca225bf6c34f0e9a3a198f22e05de8f5b65c3582663b2322b1326c541cac26080cfb5c995b769b2955e4c58cad1376fb3ac44ff864900
SSDEEP

1536:NB+FC9RntfWeoGiPyCHjKDjfQQQtUetDTBXi1q:NB+F8tfPN4yCDKDjfQQQtb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2081bf8adf540b011fb64ff2f663921b2cedaf69ea4bc7e0dcd366c71c3d3107

Files

2081bf8adf540b011fb64ff2f663921b2cedaf69ea4bc7e0dcd366c71c3d3107
.exe windows:1 windows x86 arch:x86

17a4bd9c95f2898add97f309fc6f9bcd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess

Sections

.bss
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.NewSec
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE