2b0697112841871cb2f0f5f02d5ac871d56c24285aeef68b5e9b45f4b68dc700 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b0697112841871cb2f0f5f02d5ac871d56c24285aeef68b5e9b45f4b68dc700
Size

3.0MB
MD5

e93ee1fde1ace8e82c314cc5c074025f
SHA1

5ff6740260eef6c62cbbd001e3c447a3d2ab9aa5
SHA256

2b0697112841871cb2f0f5f02d5ac871d56c24285aeef68b5e9b45f4b68dc700
SHA512

58a990f271948678a52cb3a1f999e32378238920b1435678796719f67e101b5909a7a3bb0ef73551e61bafc83696fea8d998c9aa66930fc340e9b59cdf441fce
SSDEEP

49152:eLhzqecUyTjwyM4kjFGEV7bsMEJU0NTPJZOR6eFmUy4+oDO9UKspj9OIb:exNcdpXk5ZnrEJfzGRPnDPKzspj9O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b0697112841871cb2f0f5f02d5ac871d56c24285aeef68b5e9b45f4b68dc700

Files

2b0697112841871cb2f0f5f02d5ac871d56c24285aeef68b5e9b45f4b68dc700
.dll windows:5 windows x86 arch:x86

baf7a791a31d20e3efcdb12f4481aaa5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

SetForegroundWindow
CallMsgFilterA

oleaut32

GetRecordInfoFromGuids

advapi32

IsValidSid

kernel32

SetPriorityClass
GetModuleHandleW
OutputDebugStringA
GetStringTypeA
GetModuleHandleA
AreFileApisANSI

gdi32

SetDCPenColor

mprapi

MprAdminConnectionGetInfo

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 4KB - Virtual size: 102B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ