2b2a9afe1b65c9b6e4c70d0b73352ffe8644bc41ec55407e873119e8295899b8 | Triage

Sharing

General

Target

2b2a9afe1b65c9b6e4c70d0b73352ffe8644bc41ec55407e873119e8295899b8
Size

3.7MB
MD5

7b85e37237573443d82a30eb35fe44e5
SHA1

c83f8afb580d59da49d13dc376952f86cb4aa164
SHA256

2b2a9afe1b65c9b6e4c70d0b73352ffe8644bc41ec55407e873119e8295899b8
SHA512

1cb8c1d16476ea1e0d6297efd9868b6045b62f249590bc317173f64e687004d3f76cc12ce67addc6877de771a648aeeb94fc3cc278b9e8f523ee03d501787ea6
SSDEEP

98304:xouYdyzXQiV210zezEoOUAb4J/UnfxPIsJEFquRj:xoEToOU9+8j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2b2a9afe1b65c9b6e4c70d0b73352ffe8644bc41ec55407e873119e8295899b8

Files

2b2a9afe1b65c9b6e4c70d0b73352ffe8644bc41ec55407e873119e8295899b8
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1021KB - Virtual size: 1021KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 146KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ