2d61d0bab4bb49936fb4ae8bc8edded509cd46982fc8a4eabc813d301248c471 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d61d0bab4bb49936fb4ae8bc8edded509cd46982fc8a4eabc813d301248c471
Size

5.4MB
MD5

c2ff7d8a7731a1e9be85583ceffc1285
SHA1

df4ef831070da6742b7fcc923ea8f8b16977b469
SHA256

2d61d0bab4bb49936fb4ae8bc8edded509cd46982fc8a4eabc813d301248c471
SHA512

a82df570ba579529079278e8eb078be7897d5ad1a96a26c808ffaee85512844cd5f54872df657d226e93e90f13ab051a3c4f03b9700afcce77b9df84801b20d0
SSDEEP

49152:jEuoPdLmrkUAeBACebOF10jcem5UFepEI2UHs5HsWE6zcyQUlgRIU+isrvEbuu2E:juPI16C0c3Uq0BUaqZ8m2nSyN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d61d0bab4bb49936fb4ae8bc8edded509cd46982fc8a4eabc813d301248c471

Files

2d61d0bab4bb49936fb4ae8bc8edded509cd46982fc8a4eabc813d301248c471
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ