2f1d6b310168d72703e497827f96e2b410f26b65201400ac8a257f0705c9cb5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f1d6b310168d72703e497827f96e2b410f26b65201400ac8a257f0705c9cb5e
Size

5KB
MD5

2048a91e508fbef85df88ec09784b5bd
SHA1

8258be6399ad4aebf48cbca7402458a0950a691a
SHA256

2f1d6b310168d72703e497827f96e2b410f26b65201400ac8a257f0705c9cb5e
SHA512

ed7e512d775b342fb603f3cce833154c510d991f2084ece032ffbf04748cf9e520d74fd2709b2ade90c098777c77246b04d073d779e0499037e0b0f83f3c9332
SSDEEP

48:S1lXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tRRuqSxp:WWLkFfNnOKYloIQ2pm2pbYSvxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f1d6b310168d72703e497827f96e2b410f26b65201400ac8a257f0705c9cb5e

Files

2f1d6b310168d72703e497827f96e2b410f26b65201400ac8a257f0705c9cb5e
.exe windows:5 windows x86 arch:x86

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ