2f6b44b41444b4359d2949e18b83c43a7bf0634b5d165a7ea889fa6f8423674f

General

Target

2f6b44b41444b4359d2949e18b83c43a7bf0634b5d165a7ea889fa6f8423674f
Size

339KB
MD5

8fcd523d4204d302e45ed675928c1e39
SHA1

7b6a413fdd923c6916a84851b782fa1b5aebad3c
SHA256

2f6b44b41444b4359d2949e18b83c43a7bf0634b5d165a7ea889fa6f8423674f
SHA512

ab3cc38b6285d1b952046ab9de3e63c8130cb23e80db9e0eab25f0a3cad87c4f7a421b6c7312328dba2508029fe42693bf0d97f89baa945ccee241173afbb2d5
SSDEEP

3072:jnqweT8Pr4Bjq5GbJgUuFL6JHs2qxnCtnTF7d0CdyAfalUVn1/6D8CB+RTh2kyel:LITGwgHF2BltbdyPUVn1/PRN2kIHVtSn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f6b44b41444b4359d2949e18b83c43a7bf0634b5d165a7ea889fa6f8423674f

Files

2f6b44b41444b4359d2949e18b83c43a7bf0634b5d165a7ea889fa6f8423674f
.exe windows:4 windows x86 arch:x86

fea6bbde8e93c48b52e3f41859043407

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryActCtxW
WriteConsoleOutputAttribute
GetProfileStringW
CreateSemaphoreA
SetProcessPriorityBoost
SetLastError
ShowConsoleCursor
DeviceIoControl
FindNextVolumeA
LocalHandle
lstrlenW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 111KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qxejodg
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rqvmxkb
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gumrkvc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

kakxcjb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fea6bbde8e93c48b52e3f41859043407

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: - Virtual size: 64KB

.data Size: 42KB - Virtual size: 41KB

.brdata Size: 111KB - Virtual size: 112KB

qxejodg Size: 31KB - Virtual size: 32KB

rqvmxkb Size: 31KB - Virtual size: 32KB

gumrkvc Size: 31KB - Virtual size: 32KB

kakxcjb Size: 4KB - Virtual size: 4KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: - Virtual size: 64KB

.data
Size: 42KB - Virtual size: 41KB

.brdata
Size: 111KB - Virtual size: 112KB

qxejodg
Size: 31KB - Virtual size: 32KB

rqvmxkb
Size: 31KB - Virtual size: 32KB

gumrkvc
Size: 31KB - Virtual size: 32KB

kakxcjb
Size: 4KB - Virtual size: 4KB