2bf5f277aeaa83f006fded23dfa77e9c7350f4692f01f87400174d7ac13c291d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bf5f277aeaa83f006fded23dfa77e9c7350f4692f01f87400174d7ac13c291d
Size

120KB
MD5

949bee2bd5ee3582206041339b77ece5
SHA1

d0c94b7b2d7e7e019cdd061fc5ea311e262d7eeb
SHA256

2bf5f277aeaa83f006fded23dfa77e9c7350f4692f01f87400174d7ac13c291d
SHA512

b8948242f0d6bc3a69a93eaefa89fa97397bf6b240ea5a32cf2f22f0ade7465d942472715974ea9be461d2f22bbdde7e18c68b4f326c6e859c85aa11a1405f7a
SSDEEP

3072:5CQXPsJTgXKkHRIePz4xUHoP2z8K3l/ef2FZmxpi/Un:cPJTrkHXMHez8K1/t+p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bf5f277aeaa83f006fded23dfa77e9c7350f4692f01f87400174d7ac13c291d

Files

2bf5f277aeaa83f006fded23dfa77e9c7350f4692f01f87400174d7ac13c291d
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ