2fe10c4009a5f64a29629d9816d5f38ba2a8f3f1e6a204bc4f1236eec0f9d15a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fe10c4009a5f64a29629d9816d5f38ba2a8f3f1e6a204bc4f1236eec0f9d15a
Size

65KB
MD5

bc4e60eec54b6c2b18d917d02facb237
SHA1

6a089e7d6de08b3c1e01d44be31b1094d5b553e6
SHA256

2fe10c4009a5f64a29629d9816d5f38ba2a8f3f1e6a204bc4f1236eec0f9d15a
SHA512

4c37b30b178c195088108b4ab21fa934af5636bcfcf05f1288e1f4f1bfc465ca80dfdb80f2678e9c5b84016241f2bafaad66b788c7a02481af5ba0692f7d3d5e
SSDEEP

768:ZrItKyw5WHXfQIhIiIk9ecAaVPD96KyX6K:Zr3Z5IfQIR81ad5yX6K

Score

10^/10

Malware Config

Signatures

Detects Windows executables referencing non-Windows User-Agents 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_NoneWindowsUA

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fe10c4009a5f64a29629d9816d5f38ba2a8f3f1e6a204bc4f1236eec0f9d15a

Files

2fe10c4009a5f64a29629d9816d5f38ba2a8f3f1e6a204bc4f1236eec0f9d15a
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE