2b0fa17a56bd12ef5a06b0161d2056284098f16fd5ac7738250f2a35d4ff9fa8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b0fa17a56bd12ef5a06b0161d2056284098f16fd5ac7738250f2a35d4ff9fa8
Size

1.2MB
MD5

86417c6a450a59099a47b2c1334c889a
SHA1

83870236c9fec83d187920813b7270e49efc132e
SHA256

2b0fa17a56bd12ef5a06b0161d2056284098f16fd5ac7738250f2a35d4ff9fa8
SHA512

71785500ccbccce1492ababb1035f01494874e57ca5346db7a04b8c010a34026ff58b934ae0d3832cdb9c7fb9e7aca0089b99afb3bc09ce6c544de65616f029c
SSDEEP

24576:1qylFH50Dv6RwyeQvt6ot0h9HyrOgiruAb:IylFHUv6ReIt0jSrOJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b0fa17a56bd12ef5a06b0161d2056284098f16fd5ac7738250f2a35d4ff9fa8

Files

2b0fa17a56bd12ef5a06b0161d2056284098f16fd5ac7738250f2a35d4ff9fa8
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 744KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ